The Iranian threat actor known as TA455 has been observed taking a leaf out of a North Korean hacking group’s playbook to orchestrate its own version of the Dream Job campaign targeting the aerospace industry by offering fake jobs since at least September 2023.
« The campaign distributed the SnailResin malware, which activates the SlugResin backdoor, » Israeli cybersecurity company ClearSky said