Fake LinkedIn jobs trick Mac users into downloading Flexible Ferret malware

Researchers have identified a new malware attack targeting Mac users, where attackers impersonate recruiters on LinkedIn to lure victims to a fake job website. Victims are tricked into downloading malware disguised as a software update for FFmpeg, which is actually a backdoor. This campaign, known as the Contagious Interview, is linked to the Democratic People’s Republic of Korea (DPRK) and employs social engineering tactics to recruit various professionals.

The malware, named Flexible Ferret, establishes persistence on infected Macs, allowing attackers to control the system, steal credentials, and access sensitive data. To protect against such threats, users are advised to keep software updated, avoid executing unknown commands, use real-time anti-malware solutions, and verify unsolicited communications.