Hackers are hiding malware in fake job postings on LinkedIn, according to a new report released by security firm eSentire. The company’s Threat Response Unit (TRU) has discovered that cybercriminals are hiding malicious zip files in fake job postings on the popular social network in a new form of spear phishing attack.
“For example, if a LinkedIn user’s job is listed as Senior Account Executive – International Freight, the malicious zip file will be titled Senior Account Executive – International Freight position (note the “position” added to the end).”
Read also: LinkedIn: Data of 500 million users sold on hacking forum!
Thus, the victim unknowingly begins installing the backdoor trojan “more_eggs” . A banking trojan is a program that allows other, more destructive types of malware to be loaded onto a device or computer system. Once a hacker has used the trojan to gain a foothold on a victim’s system, they can deploy ransomware , banking malware, or credential stealers to wreak more havoc on their victim.
See also: Purple Fox malware with worm capabilities infects Windows systems!
The malware displays a “deceptive” Word document to the victim, which looks like a job application, but in reality serves “no functional purpose.” It does this while violating legitimate Windows processes, which allows the malware to gain access to the victim’s computer. “It is simply used to distract the victim from the tasks being performed by more_eggs,” the company noted.
Suggestion: Phishing campaign distributes new variant of Bazar trojan!
Robb McLeod, senior director at TRU, said the malware poses a “terrible threat to businesses and professionals.” It is not picked up by regular anti-virus software and security solutions, as it uses normal Windows processes. Users are also more likely to download the malware, as it is hidden within a job posting that they are already interested in.
Finally, eSentire noted the following: “It is the perfect opportunity for hackers to exploit people who are desperate to find work. So, a customized job lure is even more tempting, especially during this time of crisis brought about by the COVID-19 pandemic.”
Information source: livemint.com
