Malware
ContagiousDrop
According to SentinelOne, these applications, typically implemented in app.js files, are deployed on ClickFix malware distribution servers.
ContagiousDrop is a JavaScript malware family.
Background
According to SentinelOne, these applications, usually written in app.js files, are hosted on ClickFix malware distribution servers. Each one runs a server that listens on configured ports for incoming HTTP GET and POST requests and invokes different functions depending on the request path. The ContagiousDrop applications push malware disguised as software updates or must-have utilities, serving a payload tailored to the victim's operating system (Windows, macOS, or Linux), system architecture, and the way the victim interacts with the server, for example whether the curl command is used. Beyond delivering malware, these applications include a built-in email notification system. Sent from a configured address to configured recipients, the notifications give the Contagious Interview threat actors visibility into victim engagement and interaction patterns.
Source: Malpedia (Fraunhofer FKIE).