Hire me! To drop malware on your computer

### Executive summary: FIN6 (Skeleton Spider) is running a social-engineering campaign that impersonates job applicants on LinkedIn and Indeed and hosts fake portfolio sites on AWS to deliver the More_eggs JavaScript backdoor via malicious ZIP files containing LNK shortcuts that execute a wscript.exe JavaScript payload; the backdoor runs in memory, enables remote command execution and credential theft, and the actors use non-hyperlinked domains, GoDaddy privacy, CAPTCHA and environment checks to evade detection, with IoCs published on GitHub.