Kandji analyzes DriverEasy.app, a Swift and Objective-C macOS application attributed in the source to North Korea’s Contagious Interview activity. The app masquerades as a Google Chrome or Google-related prompt, asks for microphone permission, then displays an authentication dialog that captures the user’s password through an NSSecureTextField. After collecting the password, the malware uses Dropbox APIs to upload it, matching behavior seen in related ChromeUpdate and CameraAccess samples. The analysis highlights reusable Swift string handling, prompt construction, ad hoc signing, and shared social-engineering tradecraft in DPRK-linked macOS interview-lure malware.