CERT24Iran-linked APT Mirage Kitten uses fake job tests to spread malwareLoading data…
CERT24Threat Observatory
Period

Iran-linked APT Mirage Kitten uses fake job tests to spread malware

Kaspersky described a Mirage Kitten campaign that used fake recruitment and coding tests sent through LinkedIn to deliver two previously undocumented malware families, NodeRabbit and PollCat. The tests were hosted on a legitimate-looking Amazon S3 link, and candidates were prohibited from using AI assistants.

← Back to intelligence

Iran-linked APT Mirage Kitten uses fake job tests to spread malware

Kaspersky described a Mirage Kitten campaign that used fake recruitment and coding tests sent through LinkedIn to deliver two previously undocumented malware families, NodeRabbit and PollCat. The tests were hosted on a legitimate-looking Amazon S3 link, and candidates were prohibited from using AI assistants.