Back Hackread

BlackSanta Malware Targets HR Staff with Fake CV Downloads

Hackread •Deeba Ahmed • March 11, 2026

Aryaka researchers have identified a new threat from a Russian-speaking group using 'BlackSanta' malware. By disguising attacks as job applications, hackers are bypassing security to target recruitment workflows.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Russian-Speaking Hackers Deploy BlackSanta Malware Against HR Departments A sophisticated cyber attack campaign has been targeting HR departments and recruiters globally, utilizing a new malware named 'BlackSanta'. This campaign, attributed to Russian-speaking threat actors, has been active for over a year, employing tactics that allow it to evade detection by antivirus and endpoint protection systems. The malware disguises itself as job applications, effectively infiltrating recruitment workflows. Aryaka researchers have reported that the attackers use a specialized module to disable security software, complicating detection efforts. Currently, the extent of the campaign remains unclear due to a lack of telemetry data. Organizations in various sectors are likely affected, but specific numbers and impacted systems have not been disclosed. The situation is ongoing, with researchers emphasizing the need for heightened vigilance among HR and recruitment teams. 4 sources 65

Extracted Entities

BlackSanta Malware Targets HR Staff with Fake CV Downloads

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)