Threat Actor Targets Recruiters With Malware

Proofpoint has alerted recruiters to a threat actor, TA4557, targeting them with malware-laden emails. The actor has been responding to job listings and contacting recruiters directly since 2022. Recipients are directed to a URL or a PDF/Word attachment with a fake resume, leading to a CAPTCHA that then begins a malware download process. Proofpoint urged recruiters to update their user awareness training to mitigate this threat.