news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Middle East
- Handala
- Asia
- Israel
- Business Services
- Jobinfo
- Data Encrypted For Impact
- Shelter Locations In Israel
- Saudi Arabia
- Retail
- Saudi Games
- Cyber Fattah Team
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Government
- Kibbutz Almog
- Saban Brands Israel
- Manufacturing
- Digitalghost
- Mprest
- Evil_Byte
- The Knesset
- Gonjeshke Darande
- Nobitex
- Chemicals And Allied Products
- Sentap
- Kimia Farma
- South-Eastern Asia
- Indonesia
- exclusive
- Scania
- Northern Europe
- Transportation
- Sweden
- Hensi
- Europe
- Media
- Tbn Israel
- Education
- Weizmann Institute Of Science
- Israeli Air Force
- Resistancetrench
- Dienet
- Israel Antiquities Authority
- Cve-2025-24016
- Wazuh
- North America
- Mirai
- CVE-2025-24016
- United States
- Epsilor Electric Fuel
- Clayoxtymus1337
- Technology
- India
- Advanced Weapons And Equipment India
- Southern Asia
- More_Eggs
- Fin6
- Alex Lab
- Cryptocurrency
- United Kingdom
- Critical Infrastructures
- Zoldyck
- Edf Energy
- Amos
- Credentials In Files
- Telecommunications
- Unix Shell
- Sudo And Sudo Caching
- Spectrum
- Spearphishing Link
- Disable Or Modify Tools
- Match Legitimate Name Or Location
- Ingress Tool Transfer
- Israel Defense Forces
- Coca-Cola Europacific Partners
- Food And Kindred Products
- Ghna
- Automotive
- Locauto
- Italy
- Southern Europe
- Mercadona
- Spain
- Whitecoat
- Wow Health Solutions
- Ups
- Healthcare
- Rip_Real_World
- Cyprus Airways
- Netsupport Rat
- Illeak
- Tel Aviv University
- Desec0X
- Lucky_Gh0$T
- Cyberlock
- Numero
- Chaos
- Yashma
- Unc6032
- 303
- Deloitte
- Gucci
- User Execution
- Command And Scripting Interpreter
- Credentials From Web Browsers
- Credentials From Password Stores
- File And Directory Discovery
- Virtualization/Sandbox Evasion
- Phishing
- Eddiestealer
- Exfiltration Over C2 Channel
- Obfuscated Files Or Information
- Data From Local System
- Screen Capture
- Password Managers
- System Information Discovery
- Drive-By Compromise
- Windows Credential Manager
- Input Capture
- Superloop
- Australia
- W_Tchdogs
- Australia And New Zealand
- Resource Hijacking
- Web Protocols
- Smb/Windows Admin Shares
- Escape To Host
- Network Service Discovery
- Deploy Container
- Exploitation For Client Execution
- Exploit Public-Facing Application
- Lateral Tool Transfer
- External Remote Services
- Remote System Discovery
- Docker
- Change Default File Association
- Venom Rat
- Cameleon
- Eastern Europe
- Romania
- Financial Theft
- Bitdefender
- Macao Special Administrative Region
- Eastern Asia
- Vicioustrap
- CVE-2023-20118
- Cve-2023-20118
- Cisco
- Cve-2025-0944
- Trimble
- Uat-6382
- CVE-2025-0944
- Tetraloader
- Valleyrat
- Malicious File
- China
- Powershell
- File Deletion
- Silver Fox
- Dynamic-Link Library Injection
- Scheduled Task
- Process Discovery
- Masquerade Task Or Service
- Rundll32
- Reflective Code Loading
- Regsvr32
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Bumblebee
- Trickbot
- Warmcookie
- Danabot
- Qakbot
- Cetus
- Purehvnc
- Bytebreaker
- Viralgod
- Latin America And The Caribbean
- Mexico
- Telcel
- Peter Green Chilled
- Cellcom
-
Jun 11, 2025
Fin6 Leverages Fake Resumes for Malware Delivery
The financially motivated threat actor Fin6 has been observed using fake resumes hosted on Amazon Web Services (AWS) to deliver the malware family known as More_Eggs. By posing as job seekers on platforms like LinkedIn and Indeed, Fin6 builds rapport with recruiters and sends phishing messages that lead to malware downloads. More_Eggs, developed by another cybercrime group called Golden Chickens, is a JavaScript-based backdoor capable of credential theft and system access. Fin6 has a history of targeting e-commerce sites to steal payment card data and has been operational since 2012.
