North Korean state-sponsored hackers have successfully infected more than 30,000 devices worldwide by posing as legitimate corporate recruiters.
The attackers use sophisticated social engineering tactics on professional networking platforms to trick unsuspecting job seekers into downloading malicious files disguised as job descriptions.
Once executed, the malware grants the threat actors full remote access to steal sensitive corporate data, intellectual property, and cryptocurrency.
This massive campaign highlights the severe risks of online recruitment fraud and the growing sophistication of state-backed cyber espionage.
Organizations must urgently train their employees to recognize advanced phishing attempts and verify the true identity of external recruiters before downloading any attachments.
