logo

BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign

ID: ed871380-2c33-51ee-aa36-160f45e80427

STIX ID: report--ed871380-2c33-51ee-aa36-160f45e80427

Feed Name: Infosecurity Magazine (News)

Threat Score
75/100

Date Published: 2026-03-11

Date Updated: 2026-04-22

...
...

A targeted malware campaign is abusing resume and job-application documents to phish human-resources and recruiting staff; the malware (including a module named BlackSanta) performs system reconnaissance, sandbox/VM checks, geo-filtering, disables EDR/antivirus, and downloads additional payloads to exfiltrate sensitive information, with attribution suggesting a likely Russian-speaking actor.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.