Hackers Target Job Recruiters Through Malicious Resumes

Russian-speaking hackers FIN6, also known as Skeleton Spider, are impersonating job seekers to phish recruiters and deploy malware through fake resumes. The malware, delivered through cloud-hosted infrastructure, evades traditional detection tools and enables credential theft, remote command execution, and potential ransomware delivery.