{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreig2dcmqhirq7qwvlmn62ldq2cn2th6htnbyoxrluk4t7wefdxtore",
    "uri": "at://did:plc:sfnebosvwzcw36qxtq46btk4/app.bsky.feed.post/3mknaltcui442"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreihduic3j2xs2nsgyflt7oc4wnwa2wen33ngmd6urzo25m37v3pviq"
    },
    "mimeType": "image/jpeg",
    "size": 74969
  },
  "path": "/security/cyber-attacks/north-korean-hackers-are-duping-freelance-developers-with-fake-interviews-to-steal-cryptocurrency-and-deliver-malware-sophos-warns-the-nickel-alley-group-is-using-linkedin-upwork-and-fiverr-to-target-victims",
  "publishedAt": "2026-04-29T11:06:16.000Z",
  "site": "https://www.itpro.com",
  "tags": [
    "Cyber Attacks",
    "Security"
  ],
  "textContent": "A fake interview process uses coding tests and repo downloads to deliver malware",
  "title": "North Korean hackers are duping freelance developers with fake interviews to steal cryptocurrency and deliver malware — Sophos warns the 'Nickel Alley' group is using LinkedIn, Upwork, and Fiverr to target victims"
}