news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Middle East
- Data Encrypted For Impact
- Business Services
- Handala
- Jobinfo
- Israel
- Asia
- Shelter Locations In Israel
- Saudi Games
- Saudi Arabia
- Retail
- Cyber Fattah Team
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Government
- Kibbutz Almog
- Manufacturing
- Saban Brands Israel
- Digitalghost
- Mprest
- The Knesset
- Evil_Byte
- Nobitex
- Gonjeshke Darande
- Chemicals And Allied Products
- Sentap
- exclusive
- Kimia Farma
- South-Eastern Asia
- Indonesia
- Europe
- Sweden
- Scania
- Transportation
- Hensi
- Northern Europe
- Media
- Tbn Israel
- Education
- Weizmann Institute Of Science
- Resistancetrench
- Israeli Air Force
- Dienet
- Israel Antiquities Authority
- North America
- CVE-2025-24016
- Cve-2025-24016
- United States
- Wazuh
- Mirai
- Clayoxtymus1337
- Technology
- Epsilor Electric Fuel
- Southern Asia
- Advanced Weapons And Equipment India
- India
- More_Eggs
- Fin6
- Alex Lab
- Cryptocurrency
- Zoldyck
- Edf Energy
- United Kingdom
- Critical Infrastructures
- Spectrum
- Match Legitimate Name Or Location
- Unix Shell
- Sudo And Sudo Caching
- Amos
- Ingress Tool Transfer
- Telecommunications
- Disable Or Modify Tools
- Spearphishing Link
- Credentials In Files
- Israel Defense Forces
- Food And Kindred Products
- Ghna
- Coca-Cola Europacific Partners
- Automotive
- Locauto
- Italy
- Southern Europe
- Whitecoat
- Spain
- Mercadona
- Healthcare
- Wow Health Solutions
- Ups
- Cyprus Airways
- Rip_Real_World
- Netsupport Rat
- Tel Aviv University
- Illeak
- Desec0X
- Chaos
- Unc6032
- Yashma
- Lucky_Gh0$T
- Numero
- Cyberlock
- Deloitte
- 303
- Gucci
- User Execution
- Input Capture
- Windows Credential Manager
- Credentials From Web Browsers
- File And Directory Discovery
- Command And Scripting Interpreter
- Drive-By Compromise
- Exfiltration Over C2 Channel
- System Information Discovery
- Phishing
- Obfuscated Files Or Information
- Data From Local System
- Password Managers
- Credentials From Password Stores
- Eddiestealer
- Screen Capture
- Virtualization/Sandbox Evasion
- Superloop
- Australia And New Zealand
- W_Tchdogs
- Australia
- Network Service Discovery
- Change Default File Association
- Docker
- Resource Hijacking
- Exploitation For Client Execution
- Smb/Windows Admin Shares
- Deploy Container
- Exploit Public-Facing Application
- External Remote Services
- Remote System Discovery
- Lateral Tool Transfer
- Escape To Host
- Web Protocols
- Romania
- Financial Theft
- Bitdefender
- Cameleon
- Venom Rat
- Eastern Europe
- Eastern Asia
- Macao Special Administrative Region
- Cisco
- CVE-2023-20118
- Cve-2023-20118
- Vicioustrap
- Cve-2025-0944
- Trimble
- Uat-6382
- Tetraloader
- CVE-2025-0944
- Valleyrat
- Powershell
- Masquerade Task Or Service
- File Deletion
- Reflective Code Loading
- China
- Process Discovery
- Rundll32
- Regsvr32
- Malicious File
- Scheduled Task
- Dynamic-Link Library Injection
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Silver Fox
- Warmcookie
- Danabot
- Trickbot
- Qakbot
- Bumblebee
- Cetus
- Purehvnc
- Bytebreaker
- Telcel
- Latin America And The Caribbean
- Viralgod
- Mexico
- Peter Green Chilled
- Cellcom
-
Jun 11, 2025
Fin6 Leverages Fake Resumes for Malware Delivery
The financially motivated threat actor Fin6 has been observed using fake resumes hosted on Amazon Web Services (AWS) to deliver the malware family known as More_Eggs. By posing as job seekers on platforms like LinkedIn and Indeed, Fin6 builds rapport with recruiters and sends phishing messages that lead to malware downloads. More_Eggs, developed by another cybercrime group called Golden Chickens, is a JavaScript-based backdoor capable of credential theft and system access. Fin6 has a history of targeting e-commerce sites to steal payment card data and has been operational since 2012.
