Hundreds of thousands of rubles for your secrets: cyber spies disguise themselves as recruiters
Essential information
- Published
- 12/03/2025 11:52
- Modified
- 12/03/2025 11:55
- Tags
- 2025-03-12 cyber espionage fake job offers impersonation phishing recruitment scam social engineering
- Related entities
- 6 observables, 1 intrusion sets (apt), 6 techniques (mitre), 1 others
Description
Cybercriminals impersonating a real company are sending fake job descriptions to employees of targeted organizations. The attackers, known as Squid Werewolf, are offering substantial sums of money, potentially hundreds of thousands of rubles, in exchange for sensitive information. This sophisticated phishing campaign aims to exploit the trust associated with legitimate recruitment processes to gather confidential data from unsuspecting employees. The operation demonstrates the evolving tactics of cyber espionage groups, blending social engineering with financial incentives to compromise organizational security.