← Back to Feed
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
April 21, 2026 · Trend Micro · Severity: HIGH
Our research on Void Dokkaebi’s operations uncovered a campaign that turns infected developer repositories into malware delivery channels. By spreading through trusted workflows, organizational codebases, and open-source projects, the threat can scale from a single compromise to a broader supply chain risk.
Key Takeaways
- Void Dokkaebi used fake job interview lures to spread malware via code repositories.
- The campaign turns infected developer repositories into malware delivery channels.
- The attack scales from a single compromise to a broader supply chain compromise.