wecreateproblems.org
wecreateproblems.org is a domain
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer).
The report is dated 2026-05-18.
The reporting files it under the persona master-0420, alongside 1 other identifier attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
domain Contagious Interview RESEARCHER POST
Registration
| Registered | 2026-05-07 |
|---|---|
| Registrar | NameCheap, Inc. |
| Expires | 2027-05-07 |
| Last changed | 2026-08-11 |
| Status | client hold, client transfer prohibited |
Source
-
Drawn from "Deep Dive into Active Github Network Running Contagious Interview", an article the researcher published on X in May 2026 covering an investigation running since mid-2025. The article names the same operation under the labels several vendors give it, Contagious Interview and PolinRider and UNC5342 among them, and describes an infection chain that begins with a repository sent during a fake interview and executes when the developer opens the folder in VS Code or Cursor. This operator runs a complete fake interview assessment platform. The domain impersonates a real hiring-assessment product, and the article describes further variants impersonating a second one. During the assessment the candidate is shown a fake camera-driver installation with a progress indicator; no driver is installed and the step exists to cover the malware running behind it.
x.com/meow_mfer/status/2056238427449004537 — meow mfer (@meow_mfer)
Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.