MITRE ATT&CKgroup

G1052 Contagious Interview

Published 2025-10-19 Modified 2026-07-31 Official page ↗
Domain
enterprise
Aliases
DeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan, DEV#POPPER, PurpleBravo, TAG-121
Version
1.0
Created
2025-10-19

Description

Contagious Interview is a North Korea–aligned threat group active since 2023. The group conducts both cyberespionage and financially motivated operations, including the theft of cryptocurrency and user credentials. Contagious Interview targets Windows, Linux, and macOS systems, with a particular focus on individuals engaged in software development and cryptocurrency-related activities.

Related

Uses · MITRE ATT&CK (58)

  • T1684.001 Impersonation sub-technique
  • T1685 Disable or Modify Tools technique
  • T1683.001 Written Content sub-technique
  • T1683.002 Audio-Visual Content sub-technique
  • S1248 XORIndex Loader software (malware)
  • S1249 HexEval Loader software (malware)
  • S1246 BeaverTail software (malware)
  • S1245 InvisibleFerret software (malware)
  • T1681 Search Threat Vendor Data technique
  • T1204.005 Malicious Library sub-technique
  • T1219.002 Remote Desktop Software sub-technique
  • T1204.004 Malicious Copy and Paste sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1588.007 Artificial Intelligence sub-technique
  • T1657 Financial Theft technique
  • T1027.010 Command Obfuscation sub-technique
  • T1593.003 Code Repositories sub-technique
  • T1608.001 Upload Malware sub-technique
  • T1589 Gather Victim Identity Information technique
  • T1593 Search Open Websites/Domains technique
  • T1593.001 Social Media sub-technique
  • T1583.003 Virtual Private Server sub-technique
  • T1583.006 Web Services sub-technique
  • T1585 Establish Accounts technique
  • T1585.001 Social Media Accounts sub-technique
  • T1585.002 Email Accounts sub-technique
  • T1587 Develop Capabilities technique
  • T1587.001 Malware sub-technique
  • T1588.002 Tool sub-technique
  • T1583 Acquire Infrastructure technique
Show all 58 ›

References