Contagious Interview is a North Korea–aligned threat group active since 2023. The group conducts both cyberespionage and financially motivated operations, including the theft of cryptocurrency and user credentials. Contagious Interview targets Windows, Linux, and macOS systems, with a particular focus on individuals engaged in software development and cryptocurrency-related activities.
The same group is tracked under different names by different vendors.
| Vendor | Name |
|---|---|
| OSINT | DeceptiveDevelopment |
| OSINT | Gwisin Gang |
| OSINT | Tenacious Pungsan |
| OSINT | DEV#POPPER |
| OSINT | PurpleBravo |
| OSINT | TAG-121 |
Top 2 by how many reports mention them.
Every report in the Global Intel Library that names Contagious Interview, newest first. Open any report to see the full analysis with provenance.
Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to Contagious Interview. Each row shows why it was linked and where it came from.
No feed indicators linked to this actor yet. Feeds are checked every hour.
Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.