Skip to content
Threat Feed
Subscribe

Actor

TraderTraitor

1 brief RSS
high threat

TraderTraitor Campaign Targeting DevOps Engineers via Weaponized Terraform Repositories

North Korean threat actor TraderTraitor is using fake job interview lures on GitHub containing weaponized Terraform lock files to deliver macOS backdoors to DevOps engineers, facilitating cloud credential theft.

Terraform TraderTraitor macos supply-chain social-engineering cloud-security devops
4t 5i