The notorious North Korean hacking group, Lazarus Group, has introduced a new variant of its Contagious Interview/TaskJacker attack, according to OpenSourceMalware. This latest iteration involves hiding a second-stage loader within Git Hooks. Victims are tricked into cloning a repository disguised as a 'programming test,' which triggers a malicious pre-commit script. This script downloads payloads that deploy malware such as InvisibleFerret and BeaverTail, specifically targeting sensitive information, including cryptocurrency wallets.