{"id":127910,"date":"2025-10-18T01:52:30","date_gmt":"2025-10-17T20:22:30","guid":{"rendered":"https:\/\/www.techworm.net\/?p=127910"},"modified":"2025-10-18T01:52:30","modified_gmt":"2025-10-17T20:22:30","slug":"north-korean-hackers-crypto-scam-etherhiding","status":"publish","type":"post","link":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html","title":{"rendered":"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed"},"content":{"rendered":"<p>The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing refinement of its toolkit.<\/p>\n<p>According to recent research from Cisco Talos, the hacking group\u2019s newest campaigns have brought BeaverTail and OtterCookie\u2019s capabilities closer together, with OtterCookie now including a new module for keylogging and capturing screenshots.<\/p>\n<h3><strong>North Korean Hackers Upped Their Game<\/strong><\/h3>\n<p>Hackers are now using blockchains like BNB Smart Chain and Ethereum to secretly control their malware, making it much harder to shut down their attacks. This method, called EtherHiding, is used by North Korean hackers who pretend to be recruiters to trick job seekers into downloading malware during fake job tasks like stealing sensitive data and cryptocurrency.<\/p>\n<p>Recently, they have updated their tricks to use new social engineering methods and a mix of old and new malware to improve their attacks.<\/p>\n<h3><strong>Detected by Cisco Talos Group<\/strong><\/h3>\n<p>Cisco Talos found suspicious activity involving a company based in Sri Lanka. The company wasn\u2019t specifically targeted, but one of its computers got infected, most likely because someone fell for a fake job offer and installed a malicious Node.js app called Chessfi from Bitbucket as part of a supposed interview task.<\/p>\n<p>The malware uses a package called &#8220;node-nvm-ssh,&#8221; which was added to the official npm library by a user named &#8220;trailer&#8221; on August 20, 2025. This package was downloaded 306 times before it was removed just six days later.<\/p>\n<p>It is one of many malicious Node libraries linked to the Contagious Interview scam. When installed, it runs a hidden script that starts the malware: it launches some JavaScript code, which then loads more code to carry out the attack.<\/p>\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">The malware, called OtterCookie v5, has many dangerous features. It can look for browser profiles and extensions, steal info from browsers and crypto wallets, install AnyDesk for remote control, and download another backdoor program called InvisibleFerret.<\/p>\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">OtterCookie also includes:<\/p>\n<ul class=\"marker:text-quiet list-disc\">\n<li class=\"py-0 my-0 prose-p:pt-0 prose-p:mb-2 prose-p:my-0 [&amp;&gt;p]:pt-0 [&amp;&gt;p]:mb-2 [&amp;&gt;p]:my-0\">\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">A remote shell module that sends your system info and clipboard contents to hackers, and allows them to send new commands to your computer.<\/p>\n<\/li>\n<li class=\"py-0 my-0 prose-p:pt-0 prose-p:mb-2 prose-p:my-0 [&amp;&gt;p]:pt-0 [&amp;&gt;p]:mb-2 [&amp;&gt;p]:my-0\">\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">A file upload module that searches your drives for files with certain names, like &#8220;bitcoin,&#8221; &#8220;backup,&#8221; or &#8220;metamask,&#8221; and uploads them to the attackers.<\/p>\n<\/li>\n<li class=\"py-0 my-0 prose-p:pt-0 prose-p:mb-2 prose-p:my-0 [&amp;&gt;p]:pt-0 [&amp;&gt;p]:mb-2 [&amp;&gt;p]:my-0\">\n<p class=\"my-2 [&amp;+p]:mt-4 [&amp;_strong:has(+br)]:inline-block [&amp;_strong:has(+br)]:pb-2\">A module that steals data from crypto wallet extensions on Chrome and Brave browsers.<\/p>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing refinement of its toolkit. According to recent research from Cisco Talos, the hacking group\u2019s newest campaigns have brought BeaverTail and OtterCookie\u2019s capabilities closer together, with OtterCookie now including a new module for keylogging [&hellip;]<\/p>\n","protected":false},"author":56,"featured_media":127913,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[64575,64576,10726],"class_list":{"0":"post-127910","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security-news","8":"tag-crypto-scam","9":"tag-job-theft","10":"tag-north-korean-hackers"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed &#187; TechWorm<\/title>\n<meta name=\"description\" content=\"The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing North Korean hackers are combining malware features and using fake job scams to spread advanced attacks that steal browser and crypto data and allow remote control of victims\u2019 devices. Their new tactics make these threats even harder to detect and stop.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed\" \/>\n<meta property=\"og:description\" content=\"The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html\" \/>\n<meta property=\"og:site_name\" content=\"TechWorm\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/techworm.in\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/amaan.rizwan\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-17T20:22:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Amaan Rizwan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/amaanthinks\" \/>\n<meta name=\"twitter:site\" content=\"@Techworm_in\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html\"},\"author\":{\"name\":\"Amaan Rizwan\",\"@id\":\"https:\/\/www.techworm.net\/#\/schema\/person\/25486878543bf8c3ce1589ca57eb8e1d\"},\"headline\":\"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed\",\"datePublished\":\"2025-10-17T20:22:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html\"},\"wordCount\":394,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.techworm.net\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg\",\"keywords\":[\"crypto scam\",\"job theft\",\"North Korean hackers\"],\"articleSection\":[\"Security news\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/www.techworm.net\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html\",\"url\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html\",\"name\":\"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed &#187; TechWorm\",\"isPartOf\":{\"@id\":\"https:\/\/www.techworm.net\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg\",\"datePublished\":\"2025-10-17T20:22:30+00:00\",\"description\":\"The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing North Korean hackers are combining malware features and using fake job scams to spread advanced attacks that steal browser and crypto data and allow remote control of victims\u2019 devices. Their new tactics make these threats even harder to detect and stop.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage\",\"url\":\"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg\",\"contentUrl\":\"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg\",\"width\":1200,\"height\":675,\"caption\":\"Crypto scam and Job thefts by North Korean hackers\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.techworm.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security news\",\"item\":\"https:\/\/www.techworm.net\/category\/security-news\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.techworm.net\/#website\",\"url\":\"https:\/\/www.techworm.net\/\",\"name\":\"TechWorm\",\"description\":\"The Tech Hub\",\"publisher\":{\"@id\":\"https:\/\/www.techworm.net\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.techworm.net\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.techworm.net\/#organization\",\"name\":\"Techworm\",\"url\":\"https:\/\/www.techworm.net\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techworm.net\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.techworm.net\/wp-content\/uploads\/2019\/12\/TECHWORM-FOOTER-LOGO.png\",\"contentUrl\":\"https:\/\/www.techworm.net\/wp-content\/uploads\/2019\/12\/TECHWORM-FOOTER-LOGO.png\",\"width\":300,\"height\":64,\"caption\":\"Techworm\"},\"image\":{\"@id\":\"https:\/\/www.techworm.net\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/techworm.in\",\"https:\/\/x.com\/Techworm_in\",\"https:\/\/www.instagram.com\/techworm_in\/\",\"https:\/\/www.linkedin.com\/company\/9221219\",\"https:\/\/www.youtube.com\/channel\/UCpa9W_3YE1c9Iu4j2ifxzsg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.techworm.net\/#\/schema\/person\/25486878543bf8c3ce1589ca57eb8e1d\",\"name\":\"Amaan Rizwan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/9c05fa10bdc384a3e41daac19ba5543630da9cbdd59672c71f7ecf2a64a3c1b3?s=96&d=wavatar&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c05fa10bdc384a3e41daac19ba5543630da9cbdd59672c71f7ecf2a64a3c1b3?s=96&d=wavatar&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c05fa10bdc384a3e41daac19ba5543630da9cbdd59672c71f7ecf2a64a3c1b3?s=96&d=wavatar&r=g\",\"caption\":\"Amaan Rizwan\"},\"description\":\"Anything and everything because titles should not define us. A non-fiction lover. Khalid Hosseini and Ruskin Bond fan. Aspiring to be better than yesterday.\",\"sameAs\":[\"https:\/\/www.facebook.com\/amaan.rizwan\",\"https:\/\/x.com\/https:\/\/twitter.com\/amaanthinks\"],\"url\":\"https:\/\/www.techworm.net\/author\/amaan\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed &#187; TechWorm","description":"The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing North Korean hackers are combining malware features and using fake job scams to spread advanced attacks that steal browser and crypto data and allow remote control of victims\u2019 devices. Their new tactics make these threats even harder to detect and stop.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html","og_locale":"en_US","og_type":"article","og_title":"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed","og_description":"The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing","og_url":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html","og_site_name":"TechWorm","article_publisher":"https:\/\/www.facebook.com\/techworm.in","article_author":"https:\/\/www.facebook.com\/amaan.rizwan","article_published_time":"2025-10-17T20:22:30+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg","type":"image\/jpeg"}],"author":"Amaan Rizwan","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/amaanthinks","twitter_site":"@Techworm_in","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#article","isPartOf":{"@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html"},"author":{"name":"Amaan Rizwan","@id":"https:\/\/www.techworm.net\/#\/schema\/person\/25486878543bf8c3ce1589ca57eb8e1d"},"headline":"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed","datePublished":"2025-10-17T20:22:30+00:00","mainEntityOfPage":{"@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html"},"wordCount":394,"commentCount":0,"publisher":{"@id":"https:\/\/www.techworm.net\/#organization"},"image":{"@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage"},"thumbnailUrl":"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg","keywords":["crypto scam","job theft","North Korean hackers"],"articleSection":["Security news"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/www.techworm.net\/#organization"}},{"@type":"WebPage","@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html","url":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html","name":"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed &#187; TechWorm","isPartOf":{"@id":"https:\/\/www.techworm.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage"},"image":{"@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage"},"thumbnailUrl":"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg","datePublished":"2025-10-17T20:22:30+00:00","description":"The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware strains, showing ongoing North Korean hackers are combining malware features and using fake job scams to spread advanced attacks that steal browser and crypto data and allow remote control of victims\u2019 devices. Their new tactics make these threats even harder to detect and stop.","breadcrumb":{"@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#primaryimage","url":"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg","contentUrl":"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg","width":1200,"height":675,"caption":"Crypto scam and Job thefts by North Korean hackers"},{"@type":"BreadcrumbList","@id":"https:\/\/www.techworm.net\/2025\/10\/north-korean-hackers-crypto-scam-etherhiding.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.techworm.net\/"},{"@type":"ListItem","position":2,"name":"Security news","item":"https:\/\/www.techworm.net\/category\/security-news"},{"@type":"ListItem","position":3,"name":"From Job Offers to Crypto Theft: Latest North Korean Hacker Campaigns Exposed"}]},{"@type":"WebSite","@id":"https:\/\/www.techworm.net\/#website","url":"https:\/\/www.techworm.net\/","name":"TechWorm","description":"The Tech Hub","publisher":{"@id":"https:\/\/www.techworm.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.techworm.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.techworm.net\/#organization","name":"Techworm","url":"https:\/\/www.techworm.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techworm.net\/#\/schema\/logo\/image\/","url":"https:\/\/www.techworm.net\/wp-content\/uploads\/2019\/12\/TECHWORM-FOOTER-LOGO.png","contentUrl":"https:\/\/www.techworm.net\/wp-content\/uploads\/2019\/12\/TECHWORM-FOOTER-LOGO.png","width":300,"height":64,"caption":"Techworm"},"image":{"@id":"https:\/\/www.techworm.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/techworm.in","https:\/\/x.com\/Techworm_in","https:\/\/www.instagram.com\/techworm_in\/","https:\/\/www.linkedin.com\/company\/9221219","https:\/\/www.youtube.com\/channel\/UCpa9W_3YE1c9Iu4j2ifxzsg"]},{"@type":"Person","@id":"https:\/\/www.techworm.net\/#\/schema\/person\/25486878543bf8c3ce1589ca57eb8e1d","name":"Amaan Rizwan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9c05fa10bdc384a3e41daac19ba5543630da9cbdd59672c71f7ecf2a64a3c1b3?s=96&d=wavatar&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/9c05fa10bdc384a3e41daac19ba5543630da9cbdd59672c71f7ecf2a64a3c1b3?s=96&d=wavatar&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c05fa10bdc384a3e41daac19ba5543630da9cbdd59672c71f7ecf2a64a3c1b3?s=96&d=wavatar&r=g","caption":"Amaan Rizwan"},"description":"Anything and everything because titles should not define us. A non-fiction lover. Khalid Hosseini and Ruskin Bond fan. Aspiring to be better than yesterday.","sameAs":["https:\/\/www.facebook.com\/amaan.rizwan","https:\/\/x.com\/https:\/\/twitter.com\/amaanthinks"],"url":"https:\/\/www.techworm.net\/author\/amaan"}]}},"jetpack_featured_media_url":"https:\/\/www.techworm.net\/wp-content\/uploads\/2025\/10\/crypto-scam-job-theft-north-korean-hackers-cover.jpg","_links":{"self":[{"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/posts\/127910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/users\/56"}],"replies":[{"embeddable":true,"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/comments?post=127910"}],"version-history":[{"count":0,"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/posts\/127910\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/media\/127913"}],"wp:attachment":[{"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/media?parent=127910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/categories?post=127910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.techworm.net\/wp-json\/wp\/v2\/tags?post=127910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}