Tech 10 Mar, 2025

SHPIO hackers started attacking Russian companies with practical work proposals

The hacker group of the werewolf, known for spy campaigns, tried to attack Russian organizations using a non -standard method for network control. Instead of sending traditional letters of fraudulent letters on behalf of the state management departments or agencies, the attackers imitated the human resource managers of a large company, providing potential victims of attractive recruitment positions. This has been reported to “gazeta.ru” in Bi.zone's journalism service.

SHPIO hackers started attacking Russian companies

According to experts, Squid Werwolf, is a spy cluster, operating against organizations from Korea, Japan, Vietnam, Russia, the United States, India, UAE and some other countries. At the end of 2024, the group tried to penetrate one of the Russian companies. Assuming the available information on the computer of one of the staff, the attackers sent him a physical letter with a proposal to work in a famous industrial organization.

The head of Bi.zone threatened intelligence Oleg Skulkin to record the high level of the attacker to attack. According to him, the attackers conducted a preliminary collection of potential victims and, to increase confidence, including data on the promised salary in FISCH. Experts emphasized that the group developed their own toxic tools and applied multi -layer obstacles to it, which significantly complicated the detection of harmful activities.

The attackers sent the victim an email containing Zip storage with the Lk Lk file disguised as a PDF document with the name of the job proposal. The goal of the attack is to encourage users to open an investment, which will lead to the launch of malware and provide attackers to access secret data.