crypto wallet stealer

North Korean threat actors linked to the Contagious Interview campaign are using steganography in SVG image files to hide malicious payloads. These payloads, part of a fake job posting and coding challenge campaign, deliver a four-stage OTTERCOOKIE-aligned malware that steals browser credentials, crypto wallets, and files.