Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
When Hackers Pose as Job Seekers – Your HR Inbox Becomes a Breach Point
📎 Your HR Team Might Be Downloading Hackers Right Now
🚨 Cybercriminals are now posing as job applicants – and it’s working.
💼 Fake resumes embedded with malware are being sent to recruiters every day. They look real. They match the job posting. But a single click installs a backdoor into your corporate network.
🎯 This tactic targets the one team that must open attachments from strangers: HR.
🧠 Groups like FIN6 are launching full campaigns this way – impersonating job seekers, injecting code into .docx files, and silently gaining access before anyone notices.
📉 Most security teams don’t train HR to defend against threats disguised as applications.
📌 That’s where AUMINT.io steps in.
We simulate applicant-based threats, coach HR on red flags, and build muscle memory against one of the fastest-growing attack vectors today.
Book Your HR Cyber Threat Simulation Now
#CyberSecurity #SocialEngineering #HRtech #RecruiterSecurity #HiringRisks #InfoSec #TalentAcquisition #AUMINT #FIN6 #MalwareAwareness #SMBSecurity