Cybercriminals are impersonating CrowdStrike recruiters to distribute cryptominer malware to job seekers. The phishing scam tricks victims into downloading a malicious app that then mines Monero cryptocurrency. The malware employs evasion tactics including limiting CPU usage and using startup scripts to stay hidden. Fake job scams are rising, and CrowdStrike advises job seekers to verify offers through official channels and install endpoint protection to flag threats.
GuidePoint warns of Python backdoor used in ransomware
GuidePoint Security identified a threat actor using a Python-based backdoor to persistently access breached endpoints and release RansomHub encryptors across compromised networks. The backdoor was
