Hackers Use Fake Resumes to Steal Data and Deploy Malware in New Cyber Campaign

A sophisticated phishing campaign is targeting companies by sending fake resumes that secretly install malware, steal credentials, and mine cryptocurrency within seconds of execution.

New Delhi | March 25, 2026 A new and highly deceptive cyberattack campaign has emerged, where hackers are using fake job applications to infiltrate corporate systems and steal sensitive data. According to a report by The Hacker News, the operation involves phishing emails carrying malicious files disguised as resumes or CVs. Cybersecurity researchers have identified the campaign, codenamed “FAUX#ELEVATE,” as a multi-stage attack targeting enterprise environments. The attackers use heavily obfuscated VBScript files that appear to be legitimate job applications. Once opened, these files trigger a chain of malicious activities, including credential theft, data exfiltration, and cryptocurrency mining.

The malware toolkit deployed in the attack is designed for maximum impact. It extracts sensitive information from browsers, steals desktop files, and installs crypto miners such as XMRig to exploit system resources. The campaign also abuses trusted platforms like Dropbox and compromised websites to host and deliver malicious payloads, making detection more difficult. One of the most alarming aspects of the attack is its speed. Experts note that the entire infection process from opening the file to stealing credentials can be completed in as little as 25 seconds. Additionally, the attackers specifically target domain-connected systems, ensuring access to valuable corporate credentials.

The campaign also includes mechanisms to erase traces after execution, leaving behind minimal evidence while maintaining persistent access to infected systems. Security experts have urged organizations, especially HR departments, to exercise extreme caution when handling unsolicited job applications and to implement stronger email filtering, endpoint protection, and employee awareness training.

Follow us On Our Social media Handles :
Instagram
Youtube
Facebook
Twitter

Also Read- Pune