DigiNews

Summary

A take-home interview scam demonstrates a multi-stage malware operation. The attacker uses a git hook pre-commit script to fetch and execute remote payloads, then drops a second stage that installs Node.js and runs a hidden parser. The piece highlights actor behavior, per-victim IDs, and the importance of vetting code in isolated environments.