SLOW PISCES TARGETS DEVELOPERS WITH CODING CHALLENGES AND INTRODUCES NEW CUSTOMIZED PYTHON MALWARE

Summary from the TLDR InfoSec newsletter

Slow Pisces is a North Korean hacking group primarily focused on generating revenue for the DPRK by targeting cryptocurrency organizations. A new campaign associated with Slow Pisces involves reaching out to cryptocurrency developers and directing them to a coding challenge that involves a malicious repository that downloads and runs a malicious C2 server. If the victim opts for a Python interview, the malware is launched via YAML deserialization, whereas if they opt for a JavaScript interview, the malware is loaded via ejs templates.