When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
A resume, supposedly hosted on the applicants personal website, is shared with the victim.
The legitimate-looking website hosts a downloadable .zip file which includes a shortcut file (LNK).
Ultimately, the malware exists to gain unauthorized access to a victims machine and then to drop additional payloads.
According to Proofpoint, theres been a recent uptick in the number of social engineering scams using benign emails.