D
CyberNorth Korea

Contagious Interview

State-sponsored cyber threat groupTrackedPending verification

Also known as: DeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan, DEV#POPPER, PurpleBravo, TAG-121

CyberPRK
Identification silhouette. Not drawn to scale between entries.
Fact cardConfidence · Source
System
TypeState-sponsored cyber threat group
Alternative designationsDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan, DEV#POPPER, PurpleBravo, TAG-121
ProliferationOrigin country only
Active since2023At least 2023Med[1]
MITRE ATT&CK IDG1052High[1]
Capabilities
ATT&CK techniques used54ATT&CK v20.1High[1]
Malware and toolsBeaverTail, HexEval Loader, InvisibleFerret, XORIndex Loader4 malware and tool entries linked in ATT&CKHigh[1]
Attribution and activity
Attributed sponsorNorth Korea-alignedHigh[1]
TargetsContagious Interview targets Windows, Linux, and macOS systems, with a particular focus on individuals engaged in software development and cryptocurrency-related activities.Med[1]
Notes
Contagious Interview is a North Korea–aligned threat group active since 2023. The group conducts both cyberespionage and financially motivated operations, including the theft of cryptocurrency and user credentials. Contagious Interview targets Windows, Linux, and macOS systems, with a particular focus on individuals engaged in software development and cryptocurrency-related activities. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.
Summary

Contagious Interview is a North Korea–aligned threat group active since 2023. The group conducts both cyberespionage and financially motivated operations, including the theft of cryptocurrency and user credentials.

Draft entry. Values come from the cited public sources and are awaiting editor verification.
CompareJSON
Operators
North Korea
Sources
  1. Contagious Interview, Group G1052, MITRE ATT&CK
    Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08
Change log
  • 2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G1052)