Recruitment Under Siege: The Rise of the More_eggs Malware

Amber | Attack Report

A recent spear-phishing campaign has been observed targeting recruiters with a JavaScript backdoor known as More_eggs, disguising itself as fake job applications. This malicious campaign highlights a continued focus on infiltrating the recruitment sector, leveraging the lure of potential hires to deliver malware. More_eggs is part of the Golden Chickens malware-as-a-service (MaaS) toolkit, a widely used platform by financially motivated threat actors.

Reduce real exposure. Not just vulnerability volume.