BlackSanta Malware Shuts Down Protections, Targets HR and Recruiting Operations

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Russian-Speaking Hackers Deploy BlackSanta Malware Against HR Departments A sophisticated cyber attack campaign has been targeting HR departments and recruiters globally, utilizing a new malware named 'BlackSanta'. This campaign, attributed to Russian-speaking threat actors, has been active for over a year, employing tactics that allow it to evade detection by antivirus and endpoint protection systems. The malware disguises itself as job applications, effectively infiltrating recruitment workflows. Aryaka researchers have reported that the attackers use a specialized module to disable security software, complicating detection efforts. Currently, the extent of the campaign remains unclear due to a lack of telemetry data. Organizations in various sectors are likely affected, but specific numbers and impacted systems have not been disclosed. The situation is ongoing, with researchers emphasizing the need for heightened vigilance among HR and recruitment teams. 4 sources 65