Fake Job Applications Deliver Dangerous More eggs Malware to HR Professionals
Under the pretense of phony job applications, a spear-phishing email campaign targeting recruiters with a JavaScript backdoor dubbed More_eggs has been spotted. This suggests that attempts to target the industry are ongoing.
According to a study by Trend Micro researchers Ryan Soliven, Maria Emreen Viray, and Fe Cureg, a recruitment officer was duped by a sophisticated spear-phishing bait into downloading and running a malicious file that was disguised as a résumé, which resulted in a more_eggs backdoor infection.
Malicious software known as More_eggs, which is offered as malware-as-a-service (MaaS), has the ability to steal credentials, including those linked to email accounts, IT administrator accounts, and online bank accounts.
It is linked to a threat actor known as the Golde...