← Back to Feed
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
April 21, 2026 · Trend Micro · Severity: HIGH
Our research on Void Dokkaebi’s operations uncovered a campaign that turns infected developer repositories into malware delivery channels. By spreading through trusted workflows, organizational codebases, and open-source projects, the threat can scale from a single compromise to a broader supply chain risk.
Key Takeaways
- Void Dokkaebi's operations turned infected developer repositories into malware delivery channels, according to Trend Micro research.
- The campaign uses fake job interview lures to spread malware through trusted workflows, organizational codebases, and open-source projects.
- Developers should treat job-interview-themed code requests with suspicion, since a single compromise can escalate into a broader supply chain attack.