Freelancers Being Targeted With Malware Disguised as Job Offers in freelancing Marketplace

www.itechblog.net

Hackers are using freelancing web applications such as the Fiverr and Freelancer to distribute malware disguised as job offers which contain attachments that are pretending to be a job description but are actually installing keyloggers in victim files

Hackers are using freelancing web applications such as the Fiverr and Freelancer to distribute malware disguised as job offers which contain attachments that are pretending to be a job description but are actually installing keyloggers in victim files.

There are keyloggers such as AgentTesla and Remote Access Trojans (RATs) which can be installed in a victim’s computer system. According to a report from the MalwareHunterTeam, these type of attacks are being implemented on freelancing platforms Fiverr and Freelancer.

As you can see in the Screenshot below the attacker is trying to create a fake job offer for multiple users.

How Are Victims Being Infected?

Most of these offers look legitimate but are coded with malicious malware that will attack the victim’s systems with keyloggers and Remote Desktop Monitoring software. Some of the victims are asking for support from the creator of the job offer for the freelancers when experiencing problems with documents that are shared on these freelancing platforms.

For example if an attacker wished to gain control of a users mobile device they would say the document cannot be opened on a PC and instead can only be opened on a mobile device. Attackers are using innovative ways to distribute their malware and also going the extra mile in “helping” these victims to install their malware on the devices. It is important to have updated anti-virus software and OS patches installed on your systems. If you are unsure of an attachment run it through websites such as Virustotal, also consider using a separate sandbox environment for opening attachments.



Hackers are using freelancing web applications such as the Fiverr and Freelancer to distribute malware disguised as job offers which contain attachments that are pretending to be a job description but are actually installing keyloggers in victim files.

There are keyloggers such as AgentTesla and Remote Access Trojans (RATs) which can be installed in a victim’s computer system. According to a report from the MalwareHunterTeam, these type of attacks are being implemented on freelancing platforms Fiverr and Freelancer.

As you can see in the Screenshot below the attacker is trying to create a fake job offer for multiple users.

How Are Victims Being Infected?

Most of these offers look legitimate but are coded with malicious malware that will attack the victim’s systems with keyloggers and Remote Desktop Monitoring software. Some of the victims are asking for support from the creator of the job offer for the freelancers when experiencing problems with documents that are shared on these freelancing platforms.


For example if an attacker wished to gain control of a users mobile device they would say the document cannot be opened on a PC and instead can only be opened on a mobile device. Attackers are using innovative ways to distribute their malware and also going the extra mile in “helping” these victims to install their malware on the devices. It is important to have updated anti-virus software and OS patches installed on your systems. If you are unsure of an attachment run it through websites such as Virustotal, also consider using a separate sandbox environment for opening attachments. For example if an attacker wished to gain control of a users mobile device they would say the document cannot be opened on a PC and instead can only be opened on a mobile device. Attackers are using innovative ways to distribute their malware and also going the extra mile in “helping” these victims to install their malware on the devices. It is important to have updated anti-virus software and OS patches installed on your systems. If you are unsure of an attachment run it through websites such as Virustotal, also consider using a separate sandbox environment for opening attachments.
There are keyloggers such as AgentTesla and Remote Access Trojans (RATs) which can be installed in a victim’s computer system. According to a report from the MalwareHunterTeam, these type of attacks are being implemented on freelancing platforms Fiverr and Freelancer.


As you can see in the Screenshot below the attacker is trying to create a fake job offer for multiple users.
How Are Victims Being Infected?
Most of these offers look legitimate but are coded with malicious malware that will attack the victim’s systems with keyloggers and Remote Desktop Monitoring software. Some of the victims are asking for support from the creator of the job offer for the freelancers when experiencing problems with documents that are shared on these freelancing platforms.


For example if an attacker wished to gain control of a users mobile device they would say the document cannot be opened on a PC and instead can only be opened on a mobile device. Attackers are using innovative ways to distribute their malware and also going the extra mile in “helping” these victims to install their malware on the devices. It is important to have updated anti-virus software and OS patches installed on your systems. If you are unsure of an attachment run it through websites such as Virustotal, also consider using a separate sandbox environment for opening attachments.

Hackers are using freelancing web applications such as the Fiverr and Freelancer to distribute malware disguised as job offers which contain attachments that are pretending to be a job description but are actually installing keyloggers in victim files.
There are keyloggers such as AgentTesla and Remote Access Trojans (RATs) which can be installed in a victim’s computer system. According to a report from the MalwareHunterTeam, these type of attacks are being implemented on freelancing platforms Fiverr and Freelancer.


As you can see in the Screenshot below the attacker is trying to create a fake job offer for multiple users.
How Are Victims Being Infected?
Most of these offers look legitimate but are coded with malicious malware that will attack the victim’s systems with keyloggers and Remote Desktop Monitoring software. Some of the victims are asking for support from the creator of the job offer for the freelancers when experiencing problems with documents that are shared on these freelancing platforms.



For example if an attacker wished to gain control of a users mobile device they would say the document cannot be opened on a PC and instead can only be opened on a mobile device. Attackers are using innovative ways to distribute their malware and also going the extra mile in “helping” these victims to install their malware on the devices. It is important to have updated anti-virus software and OS patches installed on your systems. If you are unsure of an attachment run it through websites such as Virustotal, also consider using a separate sandbox environment for opening attachments.