Criminals are using resumes to hide malicious payloads in a business climate that has seen hundreds of thousands of individuals searching for jobs. According to new research, the fake CVs disguise banking trojans and data stealers in macros within Microsoft Excel files. Researchers at Check Point Software say that a new campaign of Zloader malware has been part of an overall doubling of resume-based subterfuge in the last two months. A similar campaign involving the TrickBot loader hides within an attachment labelled as a family leave request within the parameters of the Family and Medical Leave Act.
Experts Comments
June 08, 2020
Macro attacks in Microsoft Office documents have been used by hackers for many years to distribute malware. More recent versions of Microsoft Office projects open documents with macros disabled and prompt users to turn them on. I suspect many recipients of these documents agree to allow macros without fully realising what macros are or what danger they present. If you don't need macros, don't turn them on. You can disable macros entirely by going to File > Options > Trust Center > Trust Center.....Read More
Like(
June 08, 2020
We're seeing criminals use more and more clever techniques to deliver malicious payloads through a variety of phishing attacks leveraging the COVID-19 pandemic. Using resumes or official requests for leave are particularly devious as HR receives many attachments on a daily basis. Security awareness and training can be extremely helpful in assisting staff in identifying where an attachment may be suspicious. Furthermore, technical controls should be put in place, such as isolating those email.....Read More
June 08, 2020
These kinds of scams are getting increasingly sophisticated in the ways that they masquerade as legitimate sources. Cybercrime is often opportunistic. We've seen criminals taking advantage of all kinds of changes in online behaviour since the start of COVID-19. While anti-phishing software can help stop many of them, others will always get through. The greatest defence when it comes to phishing threats is educating yourself and your employees on how to spot the signs of an attack. People should .....Read More
Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Chris Hauk, Consumer Privacy Champion, provides expert commentary at @Information Security Buzz.
"increased employee education about how to safely use email and how to avoid clicking links or opening attachments..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/expert-reaction-on-malware-campaign-hides-in-resumes-and-medical-leave-forms
Facebook Message
@Chris Hauk, Consumer Privacy Champion, provides expert commentary at @Information Security Buzz.
"increased employee education about how to safely use email and how to avoid clicking links or opening attachments..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/expert-reaction-on-malware-campaign-hides-in-resumes-and-medical-leave-forms