news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Handala
- Jobinfo
- Israel
- Asia
- Data Encrypted For Impact
- Middle East
- Business Services
- Shelter Locations In Israel
- Retail
- Saudi Games
- Cyber Fattah Team
- Saudi Arabia
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Kibbutz Almog
- Government
- Saban Brands Israel
- Manufacturing
- Digitalghost
- Mprest
- Evil_Byte
- The Knesset
- Gonjeshke Darande
- Nobitex
- Kimia Farma
- Indonesia
- Chemicals And Allied Products
- exclusive
- Sentap
- South-Eastern Asia
- Northern Europe
- Scania
- Transportation
- Hensi
- Sweden
- Europe
- Tbn Israel
- Media
- Weizmann Institute Of Science
- Education
- Israeli Air Force
- Resistancetrench
- Dienet
- Israel Antiquities Authority
- Cve-2025-24016
- Mirai
- North America
- CVE-2025-24016
- United States
- Wazuh
- Epsilor Electric Fuel
- Technology
- Clayoxtymus1337
- India
- Advanced Weapons And Equipment India
- Southern Asia
- Fin6
- More_Eggs
- Alex Lab
- Cryptocurrency
- Zoldyck
- United Kingdom
- Critical Infrastructures
- Edf Energy
- Spectrum
- Ingress Tool Transfer
- Spearphishing Link
- Disable Or Modify Tools
- Amos
- Credentials In Files
- Match Legitimate Name Or Location
- Telecommunications
- Unix Shell
- Sudo And Sudo Caching
- Israel Defense Forces
- Coca-Cola Europacific Partners
- Ghna
- Food And Kindred Products
- Automotive
- Italy
- Southern Europe
- Locauto
- Mercadona
- Spain
- Whitecoat
- Healthcare
- Ups
- Wow Health Solutions
- Cyprus Airways
- Rip_Real_World
- Netsupport Rat
- Tel Aviv University
- Illeak
- Desec0X
- Chaos
- Numero
- Cyberlock
- Unc6032
- Lucky_Gh0$T
- Yashma
- 303
- Deloitte
- Gucci
- Drive-By Compromise
- Credentials From Password Stores
- Password Managers
- Obfuscated Files Or Information
- User Execution
- Credentials From Web Browsers
- Phishing
- File And Directory Discovery
- Command And Scripting Interpreter
- Screen Capture
- Input Capture
- Virtualization/Sandbox Evasion
- Exfiltration Over C2 Channel
- Eddiestealer
- Data From Local System
- Windows Credential Manager
- System Information Discovery
- Superloop
- Australia
- W_Tchdogs
- Australia And New Zealand
- Exploit Public-Facing Application
- Change Default File Association
- Smb/Windows Admin Shares
- Remote System Discovery
- Exploitation For Client Execution
- Network Service Discovery
- Resource Hijacking
- Escape To Host
- Lateral Tool Transfer
- Web Protocols
- External Remote Services
- Docker
- Deploy Container
- Cameleon
- Romania
- Venom Rat
- Financial Theft
- Bitdefender
- Eastern Europe
- Macao Special Administrative Region
- Cisco
- Vicioustrap
- Eastern Asia
- CVE-2023-20118
- Cve-2023-20118
- Uat-6382
- CVE-2025-0944
- Tetraloader
- Trimble
- Cve-2025-0944
- Silver Fox
- Regsvr32
- Process Discovery
- Masquerade Task Or Service
- Powershell
- Dynamic-Link Library Injection
- Rundll32
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Malicious File
- File Deletion
- Valleyrat
- China
- Scheduled Task
- Reflective Code Loading
- Danabot
- Bumblebee
- Qakbot
- Warmcookie
- Trickbot
- Cetus
- Purehvnc
- Bytebreaker
- Latin America And The Caribbean
- Telcel
- Mexico
- Viralgod
- Peter Green Chilled
- Cellcom
-
Jun 11, 2025
Fin6 Leverages Fake Resumes for Malware Delivery
The financially motivated threat actor Fin6 has been observed using fake resumes hosted on Amazon Web Services (AWS) to deliver the malware family known as More_Eggs. By posing as job seekers on platforms like LinkedIn and Indeed, Fin6 builds rapport with recruiters and sends phishing messages that lead to malware downloads. More_Eggs, developed by another cybercrime group called Golden Chickens, is a JavaScript-based backdoor capable of credential theft and system access. Fin6 has a history of targeting e-commerce sites to steal payment card data and has been operational since 2012.
