Student Resume Malware: 1 Critical Security Warning
ID: afb4305f-407f-5f46-a115-b0d6ebe3ae20
STIX ID: report--afb4305f-407f-5f46-a115-b0d6ebe3ae20
Feed Name: CyberNexora News
Student Resume Malware is a targeted campaign that lures academic researchers and professors with fake graduate-school application archives; the ZIP contains an executable that displays a legitimate Word resume as a decoy while executing malware that stages SNOWLIGHT and deploys VShell to provide remote access on Windows endpoints. The report highlights memory-based execution that can evade file-only detection, recommends inspecting archive contents, monitoring process/memory/network telemetry, blocking executable attachments, sandboxing, and enforcing application control to reduce risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
