It has been noticed that the financially motivated threat actor FIN6 uses phony resumes hosted on Amazon Web Services (AWS) infrastructure to distribute the More_eggs malware family.
In a post released with The Hacker News, the DomainTools Investigations (DTI) team stated that the group establishes rapport with recruiters by pretending to be job searchers and striking up conversations on sites like Indeed and LinkedIn before sending phishing messages that result in malware.
Golden Chickens, also known as Venom Spider, is another cybercrime gang that is responsible for More_eggs. They were most recently linked to new malware families including TerraStealerV2 and TerraLogger. This JavaScript-based backdoor can facilitate system access, credential theft, and further assaults, such as ransomware.
FIN6 (also known as Camouflage Tempest, Gold Franklin, ITG08, Skeleton Spider, and TA4557) is a known client of the virus. This e-crime group initially targeted point-of-sale (PoS) systems in the retail read more about FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.