news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Jobinfo
- Handala
- Middle East
- Data Encrypted For Impact
- Business Services
- Israel
- Asia
- Shelter Locations In Israel
- Saudi Games
- Cyber Fattah Team
- Retail
- Saudi Arabia
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Government
- Kibbutz Almog
- Manufacturing
- Saban Brands Israel
- Mprest
- Digitalghost
- The Knesset
- Evil_Byte
- Nobitex
- Gonjeshke Darande
- Sentap
- Indonesia
- Chemicals And Allied Products
- South-Eastern Asia
- Kimia Farma
- exclusive
- Scania
- Transportation
- Northern Europe
- Europe
- Sweden
- Hensi
- Tbn Israel
- Media
- Weizmann Institute Of Science
- Education
- Israeli Air Force
- Resistancetrench
- Dienet
- Israel Antiquities Authority
- Mirai
- North America
- Wazuh
- United States
- CVE-2025-24016
- Cve-2025-24016
- Clayoxtymus1337
- Epsilor Electric Fuel
- Technology
- Southern Asia
- India
- Advanced Weapons And Equipment India
- More_Eggs
- Fin6
- Alex Lab
- Cryptocurrency
- Zoldyck
- Critical Infrastructures
- United Kingdom
- Edf Energy
- Unix Shell
- Credentials In Files
- Telecommunications
- Ingress Tool Transfer
- Sudo And Sudo Caching
- Amos
- Match Legitimate Name Or Location
- Spectrum
- Spearphishing Link
- Disable Or Modify Tools
- Israel Defense Forces
- Coca-Cola Europacific Partners
- Food And Kindred Products
- Ghna
- Locauto
- Automotive
- Southern Europe
- Italy
- Mercadona
- Spain
- Whitecoat
- Wow Health Solutions
- Healthcare
- Ups
- Cyprus Airways
- Rip_Real_World
- Netsupport Rat
- Illeak
- Tel Aviv University
- Desec0X
- Yashma
- Unc6032
- Cyberlock
- Chaos
- Numero
- Lucky_Gh0$T
- 303
- Deloitte
- Gucci
- Command And Scripting Interpreter
- User Execution
- System Information Discovery
- File And Directory Discovery
- Password Managers
- Input Capture
- Windows Credential Manager
- Data From Local System
- Screen Capture
- Eddiestealer
- Phishing
- Credentials From Password Stores
- Drive-By Compromise
- Credentials From Web Browsers
- Obfuscated Files Or Information
- Virtualization/Sandbox Evasion
- Exfiltration Over C2 Channel
- Australia And New Zealand
- Superloop
- W_Tchdogs
- Australia
- Remote System Discovery
- Deploy Container
- Lateral Tool Transfer
- External Remote Services
- Smb/Windows Admin Shares
- Exploitation For Client Execution
- Network Service Discovery
- Docker
- Resource Hijacking
- Change Default File Association
- Escape To Host
- Exploit Public-Facing Application
- Web Protocols
- Financial Theft
- Cameleon
- Bitdefender
- Eastern Europe
- Romania
- Venom Rat
- Vicioustrap
- Cve-2023-20118
- Cisco
- Eastern Asia
- CVE-2023-20118
- Macao Special Administrative Region
- Uat-6382
- CVE-2025-0944
- Cve-2025-0944
- Tetraloader
- Trimble
- Regsvr32
- Process Discovery
- Scheduled Task
- Valleyrat
- Malicious File
- Rundll32
- Silver Fox
- Powershell
- Dynamic-Link Library Injection
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- China
- Reflective Code Loading
- Masquerade Task Or Service
- File Deletion
- Danabot
- Warmcookie
- Bumblebee
- Qakbot
- Trickbot
- Cetus
- Purehvnc
- Bytebreaker
- Mexico
- Telcel
- Latin America And The Caribbean
- Viralgod
- Peter Green Chilled
- Cellcom
-
Jun 11, 2025
Fin6 Leverages Fake Resumes for Malware Delivery
The financially motivated threat actor Fin6 has been observed using fake resumes hosted on Amazon Web Services (AWS) to deliver the malware family known as More_Eggs. By posing as job seekers on platforms like LinkedIn and Indeed, Fin6 builds rapport with recruiters and sends phishing messages that lead to malware downloads. More_Eggs, developed by another cybercrime group called Golden Chickens, is a JavaScript-based backdoor capable of credential theft and system access. Fin6 has a history of targeting e-commerce sites to steal payment card data and has been operational since 2012.
