Iranian Hackers’ ‘Dream Job’ Scam: Aerospace Industry’s Nightmare Unveiled
Iranian hackers are offering “dream jobs” that come with malware instead of benefits! Known as Charming Kitten, these cyber tricksters impersonate North Korean attackers, targeting the aerospace industry. Their secret weapon? Fake LinkedIn profiles and SnailResin malware. Remember, if a job offer sounds too good to be true, it probably comes with a virus!

Hot Take:
Iranian hackers are at it again, proving that not all dream jobs are worth pursuing—especially when they come with a side of malware. It seems like these cyber catfish are using LinkedIn to lure aviation and aerospace professionals into a web of deceit, making them wish they had stuck to updating their resumes instead of their antivirus software. Apparently, Charming Kitten isn’t just a misnomer; it’s an outright lie, because there’s nothing charming about a malware-laden job offer!
Key Points:
- TA455, aka Charming Kitten, is targeting the aerospace industry with fake job offers.
- This campaign mirrors tactics used by the North Korean APT group, Lazarus.
- Fake LinkedIn profiles play a key role in these cyber schemes.
- Hackers employ legitimate services like Cloudflare and GitHub for cover.
- The operation has been active since September 2023, showcasing adaptability.