Microsoft Warns of Fake Skills Assessment Portals Targeting IT Job Seekers

The infamous Lazarus Group’s sub-cluster, Sapphire Sleet, is impersonating skills assessment portals to conduct social engineering campaigns. Known also as APT38, BlueNoroff, CageyChameleon and CryptoCore, Sapphire Sleet is linked to a new macOS malware, ObjCShellz. Microsoft’s threat intelligence team reported that the group targets individuals on LinkedIn before transitioning communications to other platforms and sending malware via malicious attachments or legitimate websites’ links.