As cited
Copy frozen at (site build).
threat intel
Dipping into Danger: The WARMCOOKIE backdoor
Elastic Security Labs identified a new backdoor called WARMCOOKIE deployed by threat actors posing as recruiting firms. The malware provides standard backdoor capabilities including screenshot capture, execution of additional malware, and file read/write operations.
Why it matters: Security teams should monitor for WARMCOOKIE variants and suspicious recruitment-themed phishing campaigns, as the social engineering vector targets employees during hiring processes and grants attackers full system access.
- Source published
- First seen by Cybersecurity Tracker