Contagious Interview: Malware delivered through fake developer job interviews

Feed of Microsoft Security Blog posts describing multiple high-risk campaigns and threats targeting developers and enterprises. Key item: “Contagious Interview” campaign uses fake developer job interviews to deliver backdoors (OtterCookie, FlexibleFerret) that steal API tokens, cloud credentials, crypto wallets, and source code. Other notable activity includes malicious AI browser extensions harvesting LLM chat histories at scale, Tycoon2FA AiTM phishing-as-a-service at large scale, signed malware using stolen EV certificates to deploy RMM backdoors, OAuth redirection abuse for phishing/malwar