Silent Push attributes a Contagious Interview campaign to DPRK aligned operators using three fake cryptocurrency consulting companies: BlockNovas, Angeloper Agency and SoftGlide. The campaign uses job interview lures, GitHub and freelancer or recruitment sites to deliver BeaverTail, InvisibleFerret and OtterCookie malware. Silent Push tied lianxinxiao[.]com to BeaverTail and InvisibleFerret command and control and staging activity, documented fake BlockNovas interview flows, and found infrastructure including skill assessment sites, GitHub repositories, a status dashboard and Hashtopolis. The front companies also relied on AI generated employee images and fake personas, reinforcing how this cluster blends social engineering, malware delivery and cryptocurrency targeting.