Author Topic: Malware Disguised as Job Offers Distributed on Freelance Sites  (Read 73 times)

Offline Antus67

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2926
    • View Profile
Malware Disguised as Job Offers Distributed on Freelance Sites
« on: September 22, 2018, 01:36:29 am »
By Lawrence Abrams

Attackers are using freelance job sites such as fiverr and Freelancer to distribute malware disguised as job offers. These job offers contain attachments that pretends to be the job brief, but are actually installers for keyloggers such as Agent Tesla or Remote Access Trojan (RATs).

For example, in the screenshot below you can see an attacker creating a fake job offer with the "my details.doc" attachment and sending it to a freelancer.



According to MalwareHunterTeam, this type of attack is being used on both Fiverr and Freelancer, where he has seen victims open the malicious document attached to the job offers and become infected.

full article here:https://www.bleepingcomputer.com/news/security/malware-disguised-as-job-offers-distributed-on-freelance-sites/
Malwarebytes
Voodoo Shield
Trojan Remover
Adguard