Hiring Is the New Attack Surface: Inside GhostHire & GhostCall

No ratings

Presented at BSides San Diego 2026 by

Robert Pacheco

GhostHire and GhostCall are North Korean operations that weaponize the hiring process by impersonating recruiters and interviewers to deliver custom malware. This talk explains how these campaigns target developers and tech workers through fake coding tests, video call tricks, and malicious repos, and how their tools like the PylangGhost RAT enable long-term access.