skip to content
Decrypt LOL

Get Cyber-Smart in Just 5 Minutes a Week

Decrypt delivers quick and insightful updates on cybersecurity. No spam, no data sharing—just the info you need to stay secure.

Read the latest edition

Iranian Hackers Use Job Offers for Cyber Espionage

/ 1 min read

Iranian Hackers Employ Job Lures in Cyber Espionage Campaign. The Iranian threat actor TA455 has been mimicking tactics from North Korea’s Lazarus Group to target the aerospace sector with a campaign that offers fake job opportunities. This operation, which has been active since September 2023, utilizes the SnailResin malware to deploy the SlugResin backdoor, allowing remote access to compromised systems. TA455, linked to Iran’s Islamic Revolutionary Guard Corps, has previously engaged in similar espionage activities, leveraging social engineering tactics and fake recruiting websites to deliver malware.