TA4557 Targets Recruiters by Delivering Malware Disguised as Job Applicant

Threat actor TA4557 has been focusing on recruiters by posing as job applicants to distribute malware. While this approach is not unprecedented, there have been notable shifts in both technique and attack vectors compared to their previous methods. The attackers have demonstrated an enhanced ability to deliver their malware, particularly through the utilization of direct emails to recruiters, resulting in more effective malware delivery compared to their past attacks.

Threat Level – Red | Attack Report