Malicious Software (malware) has been discovered disguised as resumes for open positions.
The attack appears to originate when an attacker responds to a Linked In job posting with a link to a fake resume. The link causes the download of malicious code.
The malware known as the More_eggs malware, is a backdoor attack capable of harvesting sensitive data, delivering additional payloads, and providing full remote access. This is a Malware-as-a-Service (MaaS) operation run by criminal groups. Hiring managers should be cautious and pay close attention to odd or unusual requests. Additionally, resumes should be scanned before opening.