Google Docs lures tied to FAMOUS CHOLLIMA show how the DPRK-nexus actor advertises fake jobs, targets developers with malicious interview tasks, and recruits proxy interview facilitators. The research pivots on Google Docs titles, resource hashes, outgoing links, and revision metadata to connect Contagious Interview documents with IT Worker recruitment activity. A reused non-default banner image linked four blockchain developer interview tasks to a proxy interviewee advert, supporting attribution to the same operator or template. Revision history showed active tailoring of adverts and repository links, including one document observed from April 2025 to April 2026.