Linkedin Phishing Campaign Exploits Open-Source Pen Testing Tool to Compromise Business Execs

ReliaQuest details a LinkedIn-based phishing campaign aimed at high-value individuals in which attackers send industry-tailored messages containing a malicious WinRAR SFX that extracts a legitimate PDF reader alongside a malicious DLL. The DLL uses DLL sideloading to evade detection and a legitimate open-source penetration-testing tool is abused to achieve persistence, data exfiltration, privilege escalation, and lateral movement; researchers recommend treating social-media links like email phishing, implementing social-media security training, and auditing personal account use on corporate devices.