news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Handala
- Israel
- Jobinfo
- Middle East
- Asia
- Business Services
- Data Encrypted For Impact
- Shelter Locations In Israel
- Saudi Arabia
- Cyber Fattah Team
- Retail
- Saudi Games
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Government
- Kibbutz Almog
- Manufacturing
- Saban Brands Israel
- Mprest
- Digitalghost
- Evil_Byte
- The Knesset
- Gonjeshke Darande
- Nobitex
- Indonesia
- Kimia Farma
- South-Eastern Asia
- Chemicals And Allied Products
- exclusive
- Sentap
- Northern Europe
- Scania
- Transportation
- Europe
- Sweden
- Hensi
- Tbn Israel
- Media
- Education
- Weizmann Institute Of Science
- Resistancetrench
- Israeli Air Force
- Israel Antiquities Authority
- Dienet
- CVE-2025-24016
- Cve-2025-24016
- Wazuh
- Mirai
- United States
- North America
- Epsilor Electric Fuel
- Technology
- Clayoxtymus1337
- Advanced Weapons And Equipment India
- India
- Southern Asia
- More_Eggs
- Fin6
- Alex Lab
- Cryptocurrency
- Zoldyck
- United Kingdom
- Edf Energy
- Critical Infrastructures
- Spectrum
- Unix Shell
- Match Legitimate Name Or Location
- Credentials In Files
- Spearphishing Link
- Telecommunications
- Sudo And Sudo Caching
- Ingress Tool Transfer
- Disable Or Modify Tools
- Amos
- Israel Defense Forces
- Ghna
- Coca-Cola Europacific Partners
- Food And Kindred Products
- Locauto
- Southern Europe
- Automotive
- Italy
- Whitecoat
- Spain
- Mercadona
- Ups
- Healthcare
- Wow Health Solutions
- Cyprus Airways
- Rip_Real_World
- Netsupport Rat
- Tel Aviv University
- Illeak
- Desec0X
- Chaos
- Cyberlock
- Numero
- Lucky_Gh0$T
- Unc6032
- Yashma
- 303
- Deloitte
- Gucci
- Credentials From Password Stores
- System Information Discovery
- Virtualization/Sandbox Evasion
- Eddiestealer
- Phishing
- Screen Capture
- Password Managers
- File And Directory Discovery
- Input Capture
- Data From Local System
- User Execution
- Exfiltration Over C2 Channel
- Drive-By Compromise
- Credentials From Web Browsers
- Command And Scripting Interpreter
- Windows Credential Manager
- Obfuscated Files Or Information
- W_Tchdogs
- Superloop
- Australia And New Zealand
- Australia
- Exploit Public-Facing Application
- Network Service Discovery
- Web Protocols
- Resource Hijacking
- Smb/Windows Admin Shares
- External Remote Services
- Deploy Container
- Escape To Host
- Change Default File Association
- Docker
- Exploitation For Client Execution
- Remote System Discovery
- Lateral Tool Transfer
- Eastern Europe
- Financial Theft
- Cameleon
- Bitdefender
- Venom Rat
- Romania
- CVE-2023-20118
- Eastern Asia
- Macao Special Administrative Region
- Cisco
- Cve-2023-20118
- Vicioustrap
- Cve-2025-0944
- Uat-6382
- Tetraloader
- CVE-2025-0944
- Trimble
- Reflective Code Loading
- Valleyrat
- Masquerade Task Or Service
- Dynamic-Link Library Injection
- File Deletion
- Process Discovery
- Silver Fox
- Malicious File
- Scheduled Task
- Powershell
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- China
- Rundll32
- Regsvr32
- Danabot
- Qakbot
- Trickbot
- Warmcookie
- Bumblebee
- Cetus
- Purehvnc
- Bytebreaker
- Viralgod
- Mexico
- Telcel
- Latin America And The Caribbean
- Peter Green Chilled
- Cellcom
-
Jun 11, 2025
Fin6 Leverages Fake Resumes for Malware Delivery
The financially motivated threat actor Fin6 has been observed using fake resumes hosted on Amazon Web Services (AWS) to deliver the malware family known as More_Eggs. By posing as job seekers on platforms like LinkedIn and Indeed, Fin6 builds rapport with recruiters and sends phishing messages that lead to malware downloads. More_Eggs, developed by another cybercrime group called Golden Chickens, is a JavaScript-based backdoor capable of credential theft and system access. Fin6 has a history of targeting e-commerce sites to steal payment card data and has been operational since 2012.
