Hackers Use Fake Student Resume to Secretly Install Malware on Researchers’ Computers

Hackers are using a fake student resume to deliver SNOWLIGHT and VShell malware to researchers via a fileless, multi-stage attack. By disguising an executable as a graduate-school application, the attackers gain remote-access to systems while displaying a legitimate document to evade detection.