Fake job applications pack malware that disables EDR

A Russian-speaking threat actor is targeting corporate HR teams with fake job applications delivered as ISO disk images hosted on legitimate cloud storage. Once opened, the ISO mounts and executes hidden commands that unpack malware concealed inside an image file. The campaign's standout component, dubbed 'BlackSanta,' is an Show more