TLDR InfoSec · STRATEGIES & TACTICS

FROM BYOVD TO A 0-DAY: UNVEILING ADVANCED EXPLOITS IN CYBER SECURITY RECRUITING SCAMS

decoded.avast.io24 min read

Summary from the TLDR InfoSec newsletter

Avast tracked a campaign that targeted users in the Asian region with fake recruitment offers. Victims were socially engineered into installing and running a Trojan version of AmazonVNC that utilized a 0-day to install a novel RAT. This RAT had the ability to change file timestamps.