news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Middle East
- Handala
- Israel
- Data Encrypted For Impact
- Jobinfo
- Asia
- Business Services
- Shelter Locations In Israel
- Cyber Fattah Team
- Saudi Arabia
- Retail
- Saudi Games
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Government
- Kibbutz Almog
- Saban Brands Israel
- Manufacturing
- Digitalghost
- Mprest
- Evil_Byte
- The Knesset
- Gonjeshke Darande
- Nobitex
- Kimia Farma
- exclusive
- Chemicals And Allied Products
- Sentap
- South-Eastern Asia
- Indonesia
- Northern Europe
- Transportation
- Europe
- Scania
- Hensi
- Sweden
- Tbn Israel
- Media
- Education
- Weizmann Institute Of Science
- Israeli Air Force
- Resistancetrench
- Israel Antiquities Authority
- Dienet
- Cve-2025-24016
- Mirai
- CVE-2025-24016
- Wazuh
- United States
- North America
- Epsilor Electric Fuel
- Technology
- Clayoxtymus1337
- Southern Asia
- India
- Advanced Weapons And Equipment India
- More_Eggs
- Fin6
- Cryptocurrency
- Alex Lab
- Zoldyck
- Edf Energy
- Critical Infrastructures
- United Kingdom
- Telecommunications
- Disable Or Modify Tools
- Sudo And Sudo Caching
- Ingress Tool Transfer
- Match Legitimate Name Or Location
- Spectrum
- Unix Shell
- Amos
- Spearphishing Link
- Credentials In Files
- Israel Defense Forces
- Ghna
- Coca-Cola Europacific Partners
- Food And Kindred Products
- Southern Europe
- Italy
- Automotive
- Locauto
- Mercadona
- Spain
- Whitecoat
- Wow Health Solutions
- Healthcare
- Ups
- Rip_Real_World
- Cyprus Airways
- Netsupport Rat
- Illeak
- Tel Aviv University
- Desec0X
- Cyberlock
- Yashma
- Unc6032
- Numero
- Chaos
- Lucky_Gh0$T
- 303
- Deloitte
- Gucci
- Input Capture
- Virtualization/Sandbox Evasion
- Exfiltration Over C2 Channel
- Screen Capture
- Phishing
- User Execution
- Credentials From Password Stores
- File And Directory Discovery
- Password Managers
- Data From Local System
- Windows Credential Manager
- Command And Scripting Interpreter
- Credentials From Web Browsers
- Drive-By Compromise
- Obfuscated Files Or Information
- System Information Discovery
- Eddiestealer
- Australia And New Zealand
- W_Tchdogs
- Superloop
- Australia
- Exploitation For Client Execution
- Resource Hijacking
- Exploit Public-Facing Application
- Remote System Discovery
- Deploy Container
- Change Default File Association
- Web Protocols
- Lateral Tool Transfer
- External Remote Services
- Escape To Host
- Smb/Windows Admin Shares
- Network Service Discovery
- Docker
- Financial Theft
- Bitdefender
- Venom Rat
- Romania
- Eastern Europe
- Cameleon
- Cisco
- Cve-2023-20118
- CVE-2023-20118
- Eastern Asia
- Macao Special Administrative Region
- Vicioustrap
- Tetraloader
- Cve-2025-0944
- Trimble
- CVE-2025-0944
- Uat-6382
- File Deletion
- Masquerade Task Or Service
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Reflective Code Loading
- China
- Process Discovery
- Dynamic-Link Library Injection
- Silver Fox
- Scheduled Task
- Powershell
- Malicious File
- Rundll32
- Regsvr32
- Valleyrat
- Danabot
- Bumblebee
- Warmcookie
- Trickbot
- Qakbot
- Cetus
- Purehvnc
- Bytebreaker
- Mexico
- Telcel
- Latin America And The Caribbean
- Viralgod
- Peter Green Chilled
- Cellcom
-
Jun 11, 2025
Fin6 Leverages Fake Resumes for Malware Delivery
The financially motivated threat actor Fin6 has been observed using fake resumes hosted on Amazon Web Services (AWS) to deliver the malware family known as More_Eggs. By posing as job seekers on platforms like LinkedIn and Indeed, Fin6 builds rapport with recruiters and sends phishing messages that lead to malware downloads. More_Eggs, developed by another cybercrime group called Golden Chickens, is a JavaScript-based backdoor capable of credential theft and system access. Fin6 has a history of targeting e-commerce sites to steal payment card data and has been operational since 2012.