{"id":440,"date":"2019-08-31T11:13:18","date_gmt":"2019-08-31T16:13:18","guid":{"rendered":"https:\/\/www.internetnewsflash.com\/?p=440"},"modified":"2019-08-31T11:01:55","modified_gmt":"2019-08-31T16:01:55","slug":"phishing-campaign-hides-malware-in-resumes","status":"publish","type":"post","link":"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/","title":{"rendered":"Phishing Campaign Hides Malware in Resumes"},"content":{"rendered":"\n

Hackers have added a new challenge for corporate HR departments, after targeting companies with a phishing campaign that hides malware in r\u00e9sum\u00e9s sent as email attachments. The hack, uncovered<\/a> by Cofense Intelligence a security services provider, uses r\u00e9sum\u00e9 files attached as .doc to deliver Quasar RAT. <\/p>\n\n\n\n

Quasar RAT is a completely legitimate open-source remote administration tool available on GitHub, but it also has a history of being abused<\/a>. The use of this tool makes it nearly impossible to attribute the campaign to a specific hacking group. <\/p>\n\n\n\n

The reports says, organizations have a high degree of difficulty detecting malware within a \u2018.doc\u2019 file because the document format can use a multitude of measures to deter detection. For example adding password protection is an option built into Microsoft Word that can make detection of this kind of malicious code nearly undetectable with current tools. <\/p>\n\n\n\n

From the report: <\/p>\n\n\n\n

“If an analyst or automated system were then to attempt to analyze the macros using an analysis tool (such as the popular tool \u2018olevba\u2019 by Philippe Lagadec), the script would fail and potentially crash from using too much memory when it attempted to analyze the macro. This is likely an intentional effect by the threat actor in the form of more than 1200 lines of garbage code that appears to be base64 encoded. Forcing the script to attempt to decode the garbage strings causes, in all likelihood, a crash due to the magnitude of decoding required.”<\/p>\n\n\n\n

While the target identified was HR departments and the bait was resumes, the mechanics of this hack could be used with any number of variations. Be Careful about the attachments you open. <\/p>\n\n\n\n

Header Image: Christiaan Colen<\/a> <\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Hackers have added a new challenge for corporate HR departments, after targeting companies with a phishing campaign that hides malware in r\u00e9sum\u00e9s sent as email attachments. The hack, uncovered by Cofense Intelligence a security services provider, uses r\u00e9sum\u00e9 files attached as .doc to deliver Quasar RAT. Quasar RAT is a completely legitimate open-sourceContinue Reading<\/a><\/span><\/p>\n","protected":false},"author":5,"featured_media":442,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[2],"tags":[310,125,309,308,69,162,122,307],"yoast_head":"\nPhishing Campaign Hides Malware in Resumes - Internet News Flash<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Phishing Campaign Hides Malware in Resumes - Internet News Flash\" \/>\n<meta property=\"og:description\" content=\"Hackers have added a new challenge for corporate HR departments, after targeting companies with a phishing campaign that hides malware in r\u00e9sum\u00e9s sent as email attachments. The hack, uncovered by Cofense Intelligence a security services provider, uses r\u00e9sum\u00e9 files attached as .doc to deliver Quasar RAT. Quasar RAT is a completely legitimate open-sourceContinue Reading\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/\" \/>\n<meta property=\"og:site_name\" content=\"Internet News Flash\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-31T16:13:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-08-31T16:01:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.internetnewsflash.com\/wp-content\/uploads\/2019\/08\/passwordfile.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1023\" \/>\n\t<meta property=\"og:image:height\" content=\"575\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Natalie Klein\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Natalie Klein\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/\",\"url\":\"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/\",\"name\":\"Phishing Campaign Hides Malware in Resumes - Internet News Flash\",\"isPartOf\":{\"@id\":\"https:\/\/www.internetnewsflash.com\/#website\"},\"datePublished\":\"2019-08-31T16:13:18+00:00\",\"dateModified\":\"2019-08-31T16:01:55+00:00\",\"author\":{\"@id\":\"https:\/\/www.internetnewsflash.com\/#\/schema\/person\/6d8f613865a576f02a4614ad449c158d\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.internetnewsflash.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phishing Campaign Hides Malware in Resumes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.internetnewsflash.com\/#website\",\"url\":\"https:\/\/www.internetnewsflash.com\/\",\"name\":\"Internet News Flash\",\"description\":\"Tech News In The Blink of An Eye\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.internetnewsflash.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.internetnewsflash.com\/#\/schema\/person\/6d8f613865a576f02a4614ad449c158d\",\"name\":\"Natalie Klein\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.internetnewsflash.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.internetnewsflash.com\/wp-content\/plugins\/wp-user-avatar\/deprecated\/wp-user-avatar\/images\/wpua-96x96.png\",\"contentUrl\":\"https:\/\/www.internetnewsflash.com\/wp-content\/plugins\/wp-user-avatar\/deprecated\/wp-user-avatar\/images\/wpua-96x96.png\",\"caption\":\"Natalie Klein\"},\"description\":\"A small town girl living in a robots world. But these robots only exist online and don't look like Gabriel Luna. I cover things relating to AI and cybersecurity, topics that are increasingly converging.\",\"url\":\"https:\/\/www.internetnewsflash.com\/author\/natalie-klein\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Phishing Campaign Hides Malware in Resumes - Internet News Flash","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/","og_locale":"en_US","og_type":"article","og_title":"Phishing Campaign Hides Malware in Resumes - Internet News Flash","og_description":"Hackers have added a new challenge for corporate HR departments, after targeting companies with a phishing campaign that hides malware in r\u00e9sum\u00e9s sent as email attachments. The hack, uncovered by Cofense Intelligence a security services provider, uses r\u00e9sum\u00e9 files attached as .doc to deliver Quasar RAT. Quasar RAT is a completely legitimate open-sourceContinue Reading","og_url":"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/","og_site_name":"Internet News Flash","article_published_time":"2019-08-31T16:13:18+00:00","article_modified_time":"2019-08-31T16:01:55+00:00","og_image":[{"width":1023,"height":575,"url":"https:\/\/www.internetnewsflash.com\/wp-content\/uploads\/2019\/08\/passwordfile.jpg","type":"image\/jpeg"}],"author":"Natalie Klein","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Natalie Klein","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/","url":"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/","name":"Phishing Campaign Hides Malware in Resumes - Internet News Flash","isPartOf":{"@id":"https:\/\/www.internetnewsflash.com\/#website"},"datePublished":"2019-08-31T16:13:18+00:00","dateModified":"2019-08-31T16:01:55+00:00","author":{"@id":"https:\/\/www.internetnewsflash.com\/#\/schema\/person\/6d8f613865a576f02a4614ad449c158d"},"breadcrumb":{"@id":"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.internetnewsflash.com\/phishing-campaign-hides-malware-in-resumes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.internetnewsflash.com\/"},{"@type":"ListItem","position":2,"name":"Phishing Campaign Hides Malware in Resumes"}]},{"@type":"WebSite","@id":"https:\/\/www.internetnewsflash.com\/#website","url":"https:\/\/www.internetnewsflash.com\/","name":"Internet News Flash","description":"Tech News In The Blink of An Eye","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.internetnewsflash.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.internetnewsflash.com\/#\/schema\/person\/6d8f613865a576f02a4614ad449c158d","name":"Natalie Klein","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.internetnewsflash.com\/#\/schema\/person\/image\/","url":"https:\/\/www.internetnewsflash.com\/wp-content\/plugins\/wp-user-avatar\/deprecated\/wp-user-avatar\/images\/wpua-96x96.png","contentUrl":"https:\/\/www.internetnewsflash.com\/wp-content\/plugins\/wp-user-avatar\/deprecated\/wp-user-avatar\/images\/wpua-96x96.png","caption":"Natalie Klein"},"description":"A small town girl living in a robots world. But these robots only exist online and don't look like Gabriel Luna. I cover things relating to AI and cybersecurity, topics that are increasingly converging.","url":"https:\/\/www.internetnewsflash.com\/author\/natalie-klein\/"}]}},"_links":{"self":[{"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/posts\/440"}],"collection":[{"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/comments?post=440"}],"version-history":[{"count":0,"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/posts\/440\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/media\/442"}],"wp:attachment":[{"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/media?parent=440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/categories?post=440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.internetnewsflash.com\/wp-json\/wp\/v2\/tags?post=440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}