{"id":48686,"date":"2022-09-30T11:05:00","date_gmt":"2022-09-30T11:05:00","guid":{"rendered":"http:\/\/09f8b55c-15fc-4981-9ee5-269d1dee2bdf"},"modified":"2022-09-30T11:05:00","modified_gmt":"2022-09-30T11:05:00","slug":"microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/","title":{"rendered":"Microsoft: Hackers are using open source software and fake jobs in phishing attacks"},"content":{"rendered":"<figure class=\"c-shortcodeImage u-clearfix c-shortcodeImage-large\">\n<div class=\"c-shortcodeImage_imageContainer\">\n<div class=\"c-shortcodeImage_image\"><picture class=\"c-cmsImage c-cmsImage_loaded\"><source media=\"(max-width: 767px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/06994464ba14bb5da3e92708f34aa3e76f9b2ac6\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=768\" alt=\"linkedin.jpg\"><source media=\"(max-width: 1023px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/00aad90a4dd85b63a6634c30d5848a8a0296b344\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1024\" alt=\"linkedin.jpg\"><source media=\"(max-width: 1440px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200\" alt=\"linkedin.jpg\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200\" alt=\"linkedin.jpg\" height=\"801.75\" width=\"1200\" fetchpriority=\"low\"><\/picture><\/div>\n<p> <!----><\/div>\n<p> <!----><figcaption> <span class=\"c-shortcodeImage_credit g-outer-spacing-top-xsmall u-block\">Image: Natee Meepian \/ Shutterstock<\/span><\/figcaption><\/figure>\n<p>Microsoft is warning that hackers are using open source software and bogus social media accounts to dupe software engineers and IT support staff with fake job offers that in reality lead to malware attacks.<\/p>\n<p>A phishing-happy hacking crew linked to North Korea&#8217;s armed forces has been using trojanized open-source apps and LinkedIn recruitment bait to hit tech industry employees, according to threat analysts from Microsoft&#8217;s advanced persistent threat (APT) research group.<\/p>\n<p>The Microsoft Threat Intelligence Center (MSTIC, pronounced &#8216;Mystic&#8217;) has seen the group using PuTTY, KiTTY, TightVNC, Sumatra PDF Reader, and the muPDF\/Subliminal Recording software installer for these attack since late April, <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2022\/09\/29\/zinc-weaponizing-open-source-software\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">according to MSTIC&#8217;s blogpost<\/a>.&nbsp;<\/p>\n<p><strong>Also: <\/strong><a href=\"https:\/\/www.zdnet.com\/article\/the-scary-future-of-the-internet-how-the-tech-of-tomorrow-will-pose-even-bigger-cybersecurity-threats\/\" rel=\"follow\">The scary future of the internet: How the tech of tomorrow will pose even bigger cybersecurity threats<\/a><\/p>\n<p>The hacking group has targeted employees in media, defense and aerospace, and IT services in the US, UK, India, and Russia. The group was also behind the <a href=\"https:\/\/www.zdnet.com\/article\/sony-pictures-corporate-files-stolen-and-released-in-cyberattack\/\" rel=\"follow\">massive attack on Sony Pictures Entertainment in 2014<\/a>.<\/p>\n<p>Also known as <a href=\"https:\/\/www.zdnet.com\/article\/us-treasury-links-north-korean-hacker-group-lazarus-to-600m-axie-infinity-heist\/\" rel=\"follow\">Lazarus<\/a>, and tracked by Microsoft as ZINC, Google Cloud&#8217;s Mandiant threat analysts <a href=\"https:\/\/www.mandiant.com\/resources\/blog\/dprk-whatsapp-phishing\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">saw the group<\/a>&nbsp;spear-phishing targets in the tech and media sectors with bogus job offers in July, using WhatsApp to share a trojanized instance of PuTTY.<\/p>\n<p>&#8220;Microsoft researchers have observed spear-phishing as a primary tactic of ZINC actors, but they have also been observed using strategic website compromises and social engineering across social media to achieve their objectives,&#8221; <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2022\/09\/29\/zinc-weaponizing-open-source-software\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">MSTIC notes<\/a>.&nbsp;<\/p>\n<p>&#8220;ZINC targets employees of companies it&#8217;s attempting to infiltrate and seeks to coerce these individuals into installing seemingly benign programs or opening weaponized documents that contain malicious macros. Targeted attacks have also been carried out <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2021\/01\/28\/zinc-attacks-against-security-researchers\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">against security researchers<\/a> over Twitter and LinkedIn.&#8221;<\/p>\n<p>The group engages in espionage, data theft, hacking crypto exchanges and banking systems, and wrecking networks. It is also tracked as Labyrinth Chollima and Black Artemis.<\/p>\n<p>A security team at Microsoft-owned LinkedIn also saw these actors creating fake profiles to impersonate recruiters from companies in the technology, defense, and media entertainment sectors.<\/p>\n<p><strong>Also: <\/strong><a href=\"https:\/\/www.zdnet.com\/article\/white-house-warns-do-these-8-things-now-to-boost-your-security-ahead-of-potential-russian-cyberattacks\/\" rel=\"follow\">White House warns: Do these 8 things now to boost your security ahead of potential Russian cyberattacks<\/a><\/p>\n<p>Targets were guided off LinkedIn to WhatsApp to share malware, and included IT and IT support workers at companies in the US, UK and India, according to Microsoft. Google&#8217;s Threat Analysis Group (TAG) found the group using Twitter, Discord, YouTube, Telegram, Keybase and email <a href=\"https:\/\/blog.google\/threat-analysis-group\/new-campaign-targeting-security-researchers\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">with similar tactics last January<\/a>.<\/p>\n<p>US authorities <a href=\"https:\/\/www.zdnet.com\/article\/us-warning-north-koreas-tech-workers-posing-as-freelance-developers\/\" rel=\"follow\">warned US and European firms<\/a> to beware of IT contractors applying for support and developer roles last year.<\/p>\n<p>LinkedIn&#8217;s Threat Prevention and Defense team terminated the bogus accounts.<\/p>\n<p>&#8220;ZINC primarily targeted engineers and technical support professionals working at media and information technology companies located in the UK, India, and the US,&#8221; MSTIC warned.&nbsp;<\/p>\n<p>&#8220;Targets received outreach tailored to their profession or background and were encouraged to apply for an open position at one of several legitimate companies. In accordance with their policies, for accounts identified in these attacks, LinkedIn quickly terminated any accounts associated with inauthentic or fraudulent behavior.&#8221;<\/p>\n<figure class=\"c-shortcodeImage u-clearfix c-shortcodeImage-large\">\n<div class=\"c-shortcodeImage_imageContainer\">\n<div class=\"c-shortcodeImage_image\"><picture class=\"c-cmsImage\"><!----> <img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/microsoft-hackers-using-open-source-software-and-fake-jobs-in-phishing-attacks\/\" alt=\"figure-5b-attack-flow-diagram-for-recent-zinc-campaign-1024x556.png\" height=\"651.5625\" width=\"1200\" fetchpriority=\"low\"><\/picture><\/div>\n<p> <!----><\/div>\n<p> <!----><figcaption> <span class=\"c-shortcodeImage_credit g-outer-spacing-top-xsmall u-block\">Source: Microsoft<\/span><\/figcaption><\/figure>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/microsoft-hackers-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft details how hackers are using easily available tools and non-existent job offers to trick developers and IT workers.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-48686","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Microsoft: Hackers are using open source software and fake jobs in phishing attacks 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft: Hackers are using open source software and fake jobs in phishing attacks 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-30T11:05:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Microsoft: Hackers are using open source software and fake jobs in phishing attacks\",\"datePublished\":\"2022-09-30T11:05:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/\"},\"wordCount\":528,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/13fe94e5156c7f0627aad6aa183db15b9608b652\\\/2021\\\/10\\\/14\\\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\\\/linkedin.jpg?auto=webp&amp;width=1200\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/\",\"name\":\"Microsoft: Hackers are using open source software and fake jobs in phishing attacks 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/13fe94e5156c7f0627aad6aa183db15b9608b652\\\/2021\\\/10\\\/14\\\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\\\/linkedin.jpg?auto=webp&amp;width=1200\",\"datePublished\":\"2022-09-30T11:05:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/13fe94e5156c7f0627aad6aa183db15b9608b652\\\/2021\\\/10\\\/14\\\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\\\/linkedin.jpg?auto=webp&amp;width=1200\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/13fe94e5156c7f0627aad6aa183db15b9608b652\\\/2021\\\/10\\\/14\\\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\\\/linkedin.jpg?auto=webp&amp;width=1200\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft: Hackers are using open source software and fake jobs in phishing attacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft: Hackers are using open source software and fake jobs in phishing attacks 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft: Hackers are using open source software and fake jobs in phishing attacks 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-09-30T11:05:00+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Microsoft: Hackers are using open source software and fake jobs in phishing attacks","datePublished":"2022-09-30T11:05:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/"},"wordCount":528,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/","url":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/","name":"Microsoft: Hackers are using open source software and fake jobs in phishing attacks 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200","datePublished":"2022-09-30T11:05:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/13fe94e5156c7f0627aad6aa183db15b9608b652\/2021\/10\/14\/d66e564b-4e6e-4bf2-ba99-974c02220c3d\/linkedin.jpg?auto=webp&amp;width=1200"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-hackers-are-using-open-source-software-and-fake-jobs-in-phishing-attacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft: Hackers are using open source software and fake jobs in phishing attacks"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=48686"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48686\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=48686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=48686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=48686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}