bitbucket.org/coinbase2024/voting-dapp
bitbucket.org/coinbase2024/voting-dapp is a malicious repository
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Henrique Marcomini (Medium).
The report is dated 2024-12-26.
malicious repository Contagious Interview RESEARCHER POST Taken down
Source
-
Transcribed by hand on 27 September 2026 from a post the scraper cannot read because Medium answers it with a bot check. A user offered a job through LinkedIn was given the Bitbucket repository voting-dapp, under an account named coinbase2024, as the hiring challenge. The post deobfuscates the BeaverTail loader and InvisibleFerret payloads it carried and gives their command-and-control address, 185.153.182.241 on port 1224, which other reporting this site holds already ties to the same activity. The post itself attributes only through the malware families, which it notes are commonly attributed to DPRK groups and tracked as Contagious Interview. The author's own analysis repository, team-bytesized/article_dprk_12_2024, is research and is not carried.
medium.com/@henrique4win/analyzing-north-korean-malware-95dc3325d943 — Henrique Marcomini (Medium)
Find this indicator in the index, or see every malicious repository this site holds under Malicious repositories in the browse listing.