BlackSanta Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
March 10, 2026
Last Seen
March 11, 2026

Related Threat Clusters

  • New 'BlackSanta' EDR Killer Targets HR Departments

    A new cyberattack campaign, attributed to Russian-speaking cybercriminals, is targeting HR departments by hijacking workflows to deploy malware that compromises security. This 'BlackSanta' EDR killer is designed to…

    3 articles · Updated March 10, 2026
  • BlackSanta Campaign Targets HR with Malware-laden Job Applications

    A Russian-speaking cybercriminal group, dubbed BlackSanta, is targeting corporate HR teams by sending fake job applications that install malware capable of disabling endpoint detection and response (EDR) tools. This…

    7 articles · Updated March 10, 2026
  • Russian-Speaking Hackers Deploy BlackSanta Malware Against HR Departments

    A sophisticated cyber attack campaign has been targeting HR departments and recruiters globally, utilizing a new malware named 'BlackSanta'. This campaign, attributed to Russian-speaking threat actors, has been active…

    4 articles · Updated March 11, 2026

Recent Intelligence Reports

  • BlackSanta Malware Shuts Down Protections, Targets HR and Recruiting Operations — Securityboulevard · March 11, 2026
  • Russian hackers target HR departments with vicious new 'BlackSanta' malware — Cybersecurity-Review · March 11, 2026
  • BlackSanta EDR Killer Malware Targets HR Workflows In Multi-Layered Attack — Cyberpress · March 11, 2026
  • BlackSanta Malware Targets HR Staff with Fake CV Downloads — Hackread · March 11, 2026
  • Malware spreading through fake job applications — Computing · March 11, 2026
  • Fake job applications pack malware that kills EDR before stealing data — Theregister · March 10, 2026
  • Kernel in the crosshairs: The BlackSanta threat campaign targeting recruitment workflows — Itbrief · March 10, 2026

CVSS v3.1 Breakdown