← Back to Feed

Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories

April 21, 2026 · Trend Micro · Severity: HIGH

Our research on Void Dokkaebi’s operations uncovered a campaign that turns infected developer repositories into malware delivery channels. By spreading through trusted workflows, organizational codebases, and open-source projects, the threat can scale from a single compromise to a broader supply chain risk.

Key Takeaways

  • Void Dokkaebi used fake job interview lures to spread malware via code repositories.
  • The campaign turns infected developer repositories into malware delivery channels.
  • The attack scales from a single compromise to a broader supply chain compromise.
☕ Buy a Coffee