TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8663
@thehackernews
The Hacker News
Post content
Post content
⚠️ ALERT: Fake resumes are infecting enterprise systems and the full attack runs in ~25 seconds. Obfuscated VBScript deploys credential stealers and a Monero miner, using Dropbox, #WordPress C2, and SMTP for exfiltration. It selectively targets domain-joined machines. 🔗 Read → https://thehackernews.com/2026/03/hackers-use-fake-resumes-to-steal.html