Iranian Group Targets Aerospace Workers with Job Scams

Iranian threat group targets aerospace workers with fake job lures. The “Iranian Dream Job Campaign,” attributed to the Iranian threat actor TA455, has been actively targeting the aerospace industry since September 2023 by offering fraudulent job opportunities. Researchers from ClearSky Cyber Security reported that this campaign delivers SnailResin malware, which activates the SlugResin backdoor, and noted similarities to tactics used by North Korea’s Kimsuky group. The campaign highlights a shift towards more precise, industry-specific social engineering attacks, exploiting the human desire for career advancement, and emphasizes the need for advanced security measures to detect such threats.