VENOM SPIDER TARGETS HIRING MANAGERS IN A PHISHING SCHEME

Summary from the TLDR InfoSec newsletter

‘Venom Spider' is a threat actor that has been running a spear-phishing campaign targeting recruiters and hiring managers. Targets are sent an email containing a zip file supposedly containing the attacker's application materials. The zip file contains a JPG distractor and uses a .lnk file to download an obfuscated BAT file loader, which ultimately downloads a dropper called More_eggs.