North Korean Hackers Target LinkedIn Users With Fake Job Offers
KnowBe4, Wednesday, August 19th, 2026
KnowBe4 reports the North Korean actor Famous Chollima posing as LinkedIn recruiters to push ClickFix malware commands.
KnowBe4 reports that hackers with the North Korean threat actor Famous Chollima are posing as recruiters on LinkedIn to trick users into ClickFix attacks, citing research from SOCRadar. Targets are job seekers approached with what appear to be legitimate recruitment approaches.
The lure culminates in the victim being instructed to run commands that install malware on their own machine. The post details the social engineering flow and how the approach exploits the trust context of a job search. It closes with guidance for recognizing the pattern.