Threat actorNorth KoreaTracked since 2026-07

REF9403

Also known as:Contagious InterviewContagious Interview - G1052

As of 2026-07-17, REF9403 is a North Korea-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as Contagious Interview, Contagious Interview - G1052.

Tracked threats: 11 high
First seen: 2026-072026-07-17
Last seen: 2026-072026-07-17
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: North KoreaNation or origin

Nation: North Korea · 1 tracked threat(s) · Categories: MALWARE

Activity timeline

REF9403 appears in 1 tracked threat between 2026-07-17 and 2026-07-17.

Tracked threats

North Korea-Linked Contagious Interview Actors (REF9403) Hide OtterCookie-Aligned Malware in SVG Flag ImagesHIGH2026-07-17