Hackers are now pretending to be jobseekers to spread malware

• DomainTools spots hackers creating fake job seeker personas
• They target recruiters and HR managers with the More Eggs backdoor
• The backdoor can steal credentials and execute commands

Hackers are now pretending to be jobseekers, targeting recruiters and organizations with dangerous backdoor malware, experts have warned.

Cybersecurity researchers DomainTools recently spotted a threat actor known as FIN6 using this method in the wild, noting the hackers would first create fake personas on LinkedIn, and create fake resume websites to go along.