Sinister "More_eggs" Malware Cracks Into Companies by Targeting Hiring Managers

Researchers observed a LinkedIn-based phishing campaign that lures recruiters to fake resume sites which, when a purported resume is downloaded, deploy a Windows shortcut payload that silently installs the More_eggs modular backdoor. The More_eggs malware provides remote access, data-harvesting and secondary payload delivery capabilities; operators (reported as criminal MaaS groups like Golden Chickens) use social engineering and site-behavior changes to erase traces and increase infection success, highlighting the need for security training and recruitment-handling policies.