THREAT OPS › Threat News › It looks like a normal resume, but the infection begins the moment it is opened.
It looks like a normal resume, but the infection begins the moment it is opened.
Malicious shortcut files disguised as resume files have recently been circulating, requiring corporate users to exercise caution. Threat actors name the files to resemble resume documents containing company names and job titles, and when executed, they display a legitimate decoy file alongside the malicious file to lower the user’s suspicion. The file then downloads additional […]
MITRE ATT&CK techniques
- Malicious FileT1204.002
Original source: https://asec.ahnlab.com/en/94165/