c8d18af147b08a6c78a06c51fccc635b
c8d18af147b08a6c78a06c51fccc635b is a file hash
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer).
The report is dated 2025-08-11.
file hash Contagious Interview RESEARCHER POST
Source
-
A fake recruiter approached the researcher on LinkedIn while impersonating the Bitgesell project, then sent a take-home coding assignment hosted in a private Bitbucket organisation. The researcher describes the assignment's backend as contacting an external URL on startup and executing whatever code it receives, which is a remote-code-execution backdoor disguised as middleware. The registration dates are the researcher's own evidence for the impersonation: the post states that bitgesell.co was registered on 9 August 2025, the day before the approach, while the project's official site was registered in April 2020. A second domain, bitgesell.finance, appeared a day later with the same hire@ address pattern. The hashes are reproduced from the researcher's own indicator list for the assignment repository.
x.com/meow_mfer/status/1954703827317526913 — meow mfer (@meow_mfer)
Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.