Fake LinkedIn Invite Leads to ZeuS Trojan
Summary: A malware spam campaign mimicking LinkedIn invitations began on a Monday morning and at its peak accounted for as much as 24 percent of all spam, according to Cisco Systems. Recipients who clicked were shown a 'Please Waiting, 4 seconds' page and then passed through a site running what appeared to be the SEO Exploit Pack, a crimeware kit that tried more than a dozen browser vulnerabilities to install the password-stealing ZeuS Trojan before sending the victim on to Google.com.
What you should know: The same ZeuS operators were using job sites like Monster.com and Careerbuilder.com to recruit money mules, so the infrastructure that infected new PCs was also used to cash out the same victims. IT World reporter Dan Tynan said he was tricked into clicking the link and possibly infecting his system.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026