RominaMabelRamirez/hflix
RominaMabelRamirez/hflix is a malicious repository
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from GitLab Threat Intelligence.
The report is dated 2025-09-17.
malicious repository Contagious Interview CURATED Taken down
Source
-
GitHub repository from which the actor's Vercel-hosted fake recruiting site (businesshire.top) was built, according to Vercel deployment variables GitLab Threat Intelligence recovered in September 2025. The account name may be an assumed identity; the repository, not the person, is the indicator.
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure — GitLab Threat Intelligence
Find this indicator in the index, or see every malicious repository this site holds under Malicious repositories in the browse listing.