Hackers Exploit Job Boards, Stealing Millions of Resumes and Personal Data

ResumeLooters, a financially motivated cybercrime group active since early 2023, has exploited SQL injection and XSS vulnerabilities in job-search and retail websites—primarily in the APAC region—to steal and sell large volumes of personal data (approximately 2,188,444 records, including ~510,259 from job sites). The group uses public offensive tools (sqlmap, BeEF, Metasploit, dirsearch, xray) to automate exploitation and to deploy credential-harvesting scripts, then offers the pilfered data for sale on Telegram.