2 million job seekers targeted by data thieves

ResumeLooters, a cybercriminal group detected in November 2023, exploited SQL injection and cross-site scripting vulnerabilities to extract resumes and personally identifiable information from 65 job listing and retail websites—impacting over two million job seekers across APAC and other regions—and advertised the stolen data for sale on Chinese-speaking Telegram channels, with indicators suggesting a likely Chinese origin.