BlackSanta Campaign Targets HR with Malware-laden Job Applications

BlackSanta Campaign Targets HR with Malware-laden Job Applications

First seen 10 Mar 2026, 13:57 UTC •ItbriefTheregisterBleepingcomputerComputingInfosecurity-Magazine+2 •82% similarity •68.0

Article Content

Browse articles
ThreatCluster

A Russian-speaking cybercriminal group, dubbed BlackSanta, is targeting corporate HR teams by sending fake job applications that install malware capable of disabling endpoint detection and response (EDR) tools. This campaign exploits the hiring process, using seemingly legitimate resumes hosted on familiar cloud storage services to infiltrate organizations and steal sensitive data.

ThreatCluster AI

Timeline

2026-03-10
BlackSanta campaign reported targeting HR workflows
2026-03-10
Malware identified that disables EDR tools
2026-03-10
Fake job applications used as attack vector

Extracted Entities

1 / 2

Community

Browse all →