From d936d27239c26ed3612c2238c8fb389f27969a60 Mon Sep 17 00:00:00 2001
From: S3N4T0R <121706460+S3N4T0R-0X0@users.noreply.github.com>
Date: Sun, 27 Jul 2025 16:07:57 -0400
Subject: [PATCH] Update README.md

---
 North Koreans APT/Stardust Chollima/README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/North Koreans APT/Stardust Chollima/README.md b/North Koreans APT/Stardust Chollima/README.md
index 7f96158..a709985 100644
--- a/North Koreans APT/Stardust Chollima/README.md	
+++ b/North Koreans APT/Stardust Chollima/README.md	
@@ -51,3 +51,10 @@ Skype, etc for an interview and tricked him into installing the malicious code.
 
 <img width="638" height="640" alt="ss" src="https://github.com/user-attachments/assets/70dd60a3-934a-4c28-8f3d-2c4c9b9b994c" />
 
+The group addressed several employees of the company through LinkedIn's messaging. Passing himself as a Meta
+recruiter, the attacker used a lure of job offer to attract the attention and confidence of the target
+
+<img width="417" height="455" alt="pp" src="https://github.com/user-attachments/assets/03cde7e3-389b-4300-b3ad-f3918fc1df1d" />
+
+
+