North Korean Hackers Hide Recruitment Lures in Google Docs Job Ads
A DPRK-linked actor, dubbed FAMOUS CHOLLIMA, posts fake job ads on Google Docs to lure developers into installing credential‑stealing malware. The blog details how to hunt these Docs via urlscan and a custom index, revealing long‑lived accounts and reused assets across campaigns.