LinkedIn is a very popular social network for professionals looking for jobs or contacting others, because last year there was a severe job crisis in many parts of the world, and with many people turning to LinkedIn to search for jobs, it appears that hackers are targeting them with a new phishing campaign.
According to a report by Gizmodo, hackers are using a complex campaign to target users’ devices. The report quotes research published by eSentire, a provider of cybersecurity solutions, where eSentire warned users that a hacking group was targeting “business professionals on LinkedIn with fake job offers in an attempt to infect them with a sophisticated backdoor”. Trojans.”
What is a Trojan backdoor? It is a form of malware that gives hackers remote access and control of the victim’s computer and allows them to send, receive, run and even delete files, and they have revealed that the hackers, according to the report, are associated with a group called Golden Chickens.
How do hackers target LinkedIn users?
Hackers send a direct message to a user with some kind of job offer, as the offer is fake but is bundled with or has a .zip file attached. The zip file contains hidden malware that helps hackers target and control a victim’s machine.
ESentire explains how the whole process works, “If a LinkedIn member’s job is listed as Senior Account Manager – International Shipping, the malicious zip file will be named Senior Account Executive – International Freight position (note the ‘job’ added to the end).”
The report adds: “When the fake job offer is opened, the victim unintentionally starts installing the hidden back door without files, more_eggs.”
Malware more_eggs, according to Rob MacLeod, Senior Manager at eSentire, is particularly worrisome given that it has three elements that make it a “formidable threat to businesses and entrepreneurs”. It is dangerous as malware is difficult to identify with antivirus tools and other security solutions.
Since the COVID pandemic, unemployment rates have risen dramatically. It is an ideal time to take advantage of desperate job seekers to find work, and therefore, the lure of dedicated work is even more tempting during these troubled times, “McLeod explained.