A new set of phishing attacks delivering the more_eggs malware has been seen hitting corporate hiring managers with fake resumes as an infection vector, a year after potential job seekers on LinkedIn were lured with bogus job offers.<\/p>\n\n\n\n
While we remember, Golden Chickens has been active for a while now and the same goes for its more_eggs malware since a while ago there was a spear-phishing campaign targeting professionals on LinkedIn with fake job offers, according to a group of researchers. .<\/p>\n\n\n\n
These threat actors have previously sent phishing emails attempting to trick victims into clicking on a malicious .ZIP file offering a job by making it look like a legitimate offer but\u2026 This is of course false.<\/p>\n\n\n\n
This time, they are targeting hiring managers with bogus resumes instead of targeting job seekers with bogus job postings.<\/p>\n\n\n\n
Canadian cybersecurity company eSentire said it has identified and disrupted four separate security incidents, three of which occurred in late March. Target entities include a US-based aerospace company, a UK-based accounting firm, a law firm and an employment agency, both based in Canada.<\/p>\n\n\n\n
The threat actors behind more_eggs use a scalable spear-phishing approach that weaponizes expected communications, such as resumes, that match a hiring manager’s expectations or job offers, targeting hopeful candidates that match their current job titles.<\/p>\n","protected":false},"excerpt":{"rendered":"
Some of us remember the MORE_EGGS malware and how it tried to trick us and… Now it’s back with a different way of working…..<\/p>\n","protected":false},"author":1,"featured_media":4163,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[36],"class_list":["post-4162","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity"],"yoast_head":"\n