North Korean cybercriminals are expanding their fake recruitment schemes targeting job seekers to deploy their signature espionage malware and new tools allowing them to take control of victims’ systems, according to a new report.

U.S. cybersecurity firm Socket said in a report published on Friday that actors linked to North Korea’s infamous Lazarus Group recently published 11 new malicious packages that deliver the previously identified BeaverTail infostealer and a new remote access trojan (RAT) loader.

The firm, which specializes in preventing software supply chain attacks that compromise vendors that are part of the actual