The financially motivated threat actor known as FIN6 has been observed leveraging fake resumes hosted on Amazon Web Services (AWS) infrastructure to deliver a malware family called More_eggs.”By posing as job seekers and initiating conversations through platforms like LinkedIn and Indeed, the group builds rapport with recruiters before delivering phishing messages that lead to malware,” the
First seen on thehackernews.com
Jump to article: thehackernews.com/2025/06/fin6-uses-aws-hosted-fake-resumes-on.html
