`https://github.com/vxaboveground`

https://github.com/vxaboveground is a GitHub account that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Proofpoint. The report is dated 2026-06-05.

github profile Contagious Interview MATCHED IN SOURCE removed checked 2026-08-30

Listed as vxaboveground

First seen 2026-06-05 · last seen 2026-06-05

removed checked 2026-08-30

Source

…infection chain The Linux and macOS infection chains use native Go binaries derived from the open-source Overlord C&C framework (github.com/vxaboveground/Overlord).…
Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency | Proofpoint US — Proofpoint · under “Linux/macOS infection chain” · published 2026-06-05 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency | Proofpoint US

Proofpoint lists 81 other indicators in this source. 12 are shown, chosen across types.

All 82 indicators from this source