The TA455 subgroup of the Iranian actor Charming Kitten has been conducting fraudulent social engineering campaigns, offering fake job positions in aerospace to distribute SnailResin malware.
Using spear phishing techniques, attackers hide malicious attachments within legitimate-looking job application files, cleverly evading detection by antivirus software.
The group employs a range of services like Cloudflare and GitHub to obscure their digital infrastructure, complicating the task for cybersecurity professionals.
This particular campaign highlights the lengths to which threat actors will go to exploit job seekers' aspirations, infiltrating their systems with deceptive strategies.
Collection
[
|
...
]