Talent Need Not Apply: Tradecraft and Objectives of Job-themed APT Social Engineering
2022-08-11 • PWC •
http://i.blackhat.com/USA-22/Thursday/US-22-Wikoff-Talent-Need-Not-Apply.pdf
Attachments
PwC's Black Hat USA presentation examines job-themed social engineering used by advanced threat actors, with particular attention to North Korea-linked activity tracked as Black Artemis or temp.Hermit. The material describes malicious recruiter-style lures, dream-job themes, and attachments aimed at sectors such as aerospace, defense industrial base, and manufacturing. It uses the campaign evolution to explain initial-access tradecraft, attacker motives, and recognition of social-engineering attempts that exploit employment anxiety and professional opportunity.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| DOMAIN | mail.daiwa-inv.com | 2022-08-11 | 2022-08-11 |
| DOMAIN | lm-careers.com | 2022-08-11 | 2022-08-11 |
| DOMAIN | ny.silvergatehr.com | 2022-08-11 | 2022-08-11 |
| DOMAIN | applytalents.com | 2022-08-11 | 2022-08-11 |
| DOMAIN | careers-finder.com | 2022-08-11 | 2022-08-11 |
| DOMAIN | global-job.org | 2022-05-05 | 2022-08-11 |
| DOMAIN | indeedus.org | 2022-03-24 | 2022-08-11 |