New ResumeLooters Gang Targets Job Seekers, Steals Millions of Resumes

**Executive summary:** Group-IB uncovered an active criminal campaign dubbed ResumeLooters that leveraged SQL injection and XSS on at least 65 job-search websites (primarily in APAC) to steal sensitive user data — more than two million unique email addresses and other PII — which was later marketed on Telegram; the actors used common exploitation tools (sqlmap, Acunetix, Beef, Metasploit) and compromised sites in multiple countries.