Industrial Control Systems Hit By Surge In Email-Delivered Worm Campaigns
ID: 98f7a970-0cc6-524e-82d1-691b56189794
STIX ID: report--98f7a970-0cc6-524e-82d1-691b56189794
Feed Name: Cyber Press
Threat Score
In Q4 2025 researchers observed a global surge in email-delivered worms as part of the "Curriculum-Vitae-Catalina" phishing campaign distributing Backdoor.MSIL.XWorm to ICS environments; attackers targeted HR staff with resume-themed emails containing a malicious executable ("Curriculum Vitae-Catalina.exe"), and the campaign spread via USB in some regions, resulting in widespread blocked detections across multiple global regions and industry impacts (notably oil & gas and biometrics).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.