Cybercriminal Group FIN6 Uses AWS-Hosted Fake Resumes to Spread More_eggs Malware

The cybercriminal group FIN6 is using fake resumes hosted on Amazon Web Services (AWS) infrastructure to spread the More_eggs malware. By posing as job seekers and engaging in conversations on platforms like LinkedIn and Indeed, the group establishes a trusting relationship with recruiters before sending phishing messages that lead to malware infection.