{"id":426,"date":"2023-03-12T09:49:24","date_gmt":"2023-03-12T12:49:24","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=426"},"modified":"2023-03-12T09:49:24","modified_gmt":"2023-03-12T12:49:24","slug":"profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/","title":{"rendered":"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Um suposto grupo de hackers norte-coreanos tem como alvo pesquisadores de seguran\u00e7a e organiza\u00e7\u00f5es de m\u00eddia nos EUA e na Europa com ofertas de emprego falsas que levam \u00e0 implanta\u00e7\u00e3o de tr\u00eas novas fam\u00edlias de malware.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Os invasores usam a engenharia social para convencer seus alvos a se engajar no WhatsApp, onde lan\u00e7am a carga de malware \u201cPlankWalk\u201d, um backdoor feito em C++ que os ajuda a estabelecer o controle de uma esta\u00e7\u00e3o no ambiente corporativo do alvo.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De acordo com a <a href=\"https:\/\/www.mandiant.com\/resources\/blog\/lightshow-north-korea-unc2970\" target=\"_blank\" rel=\"noreferrer noopener\">Mandiant<\/a>, que acompanha a campanha em particular desde junho de 2022, a atividade observada se sobrep\u00f5e \u00e0 <strong>\u201cOpera\u00e7\u00e3o Dream Job\u201d<\/strong>, atribu\u00edda ao cluster norte-coreano conhecido como <strong>\u201cgrupo Lazarus\u201d<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No entanto, a Mandiant observou diferen\u00e7as suficientes nas ferramentas empregadas, infraestrutura e TTPs (t\u00e1ticas, t\u00e9cnicas e procedimentos) para atribuir esta campanha a um grupo separado que eles rastreiam como \u201cUNC2970\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Al\u00e9m disso, os invasores usam malwares in\u00e9ditos chamados &#8216;<strong>TOUCHMOVE<\/strong>&#8216;, &#8216;<strong>SIDESHOW<\/strong>&#8216; e &#8216;<strong>TOUCHSHIFT<\/strong>&#8216;, que n\u00e3o foram atribu\u00eddos a nenhum grupo de amea\u00e7as conhecido.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A Mandiant diz que o grupo em particular j\u00e1 tinha como alvo empresas de tecnologia, grupos de m\u00eddia e entidades da ind\u00fastria de defesa. Sua campanha mais recente mostra que evoluiu seu escopo de segmenta\u00e7\u00e3o e adaptou seus recursos.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Phishing e engenharia social como vetor de infec\u00e7\u00e3o<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Os hackers iniciam seu ataque abordando alvos pelo LinkedIn, se passando por recrutadores de empregos. Por fim, eles mudaram para o WhatsApp para continuar o processo de &#8220;recrutamento&#8221;, compartilhando um documento do Word incorporado com macros maliciosas.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"877\" height=\"735\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego2.jpg\" alt=\"\" class=\"wp-image-427\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego2.jpg 877w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego2-300x251.jpg 300w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego2-768x644.jpg 768w\" sizes=\"auto, (max-width: 877px) 100vw, 877px\" \/><figcaption class=\"wp-element-caption\">Imagem do documento enviado do word contendo c\u00f3digo malicioso<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">A Mandiant diz que, em alguns casos, esses documentos do Word s\u00e3o estilizados para se adequar \u00e0s descri\u00e7\u00f5es de trabalho que est\u00e3o promovendo para os alvos. Por exemplo, uma das iscas compartilhadas por Mandiant se faz passar pelo New York Times, conforme mostrado abaixo.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As macros do documento do Word executam um codigo que baixa uma vers\u00e3o trojanizada do TightVNC de sites WordPress comprometidos que servem como servidores de comando e controle do invasor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A Mandiant rastreia esta vers\u00e3o personalizada do TightVNC como \u201cLidShift\u201d. Ap\u00f3s a execu\u00e7\u00e3o, ele usa inje\u00e7\u00e3o de DLL para carregar uma DLL criptografada (<strong>plugin do Notepad ++ trojanizado<\/strong>) na mem\u00f3ria do sistema.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O arquivo carregado \u00e9 um downloader de malware chamado \u201cLidShot\u201d, que executa a enumera\u00e7\u00e3o do sistema e instala o ultimo modulo do malware,chamado \u201cPlankWalk\u201d.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Disfar\u00e7ando como arquivos do Windows<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Durante a fase p\u00f3s-explora\u00e7\u00e3o, os hackers norte-coreanos usam um novo dropper de malware personalizado chamado \u201cTouchShift\u201d, que se disfar\u00e7a como um bin\u00e1rio leg\u00edtimo do Windows (mscoree.dll ou netplwix.dll).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O TouchShift ent\u00e3o carrega outro utilit\u00e1rio de captura de tela chamado \u201cTouchShot\u201d, um keylogger chamado \u201cTouchKey\u201d, um tunneller\u00a0 chamado \u201cHookShot\u201d, um novo carregador chamado \u201cTouchMove\u201d e um novo backdoor chamado \u201cSideShow\u201d. novo backdoor personalizado SideShow, que suporta um total de 49 comandos. Esses comandos permitem que um invasor a execu\u00e7\u00e3o de c\u00f3digo arbitr\u00e1rio no dispositivo comprometido, modifique o registro, manipule as configura\u00e7\u00f5es do firewall, adicione novas tarefas agendadas e execute cargas adicionais.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Em alguns casos em que as organiza\u00e7\u00f5es visadas n\u00e3o usavam uma VPN, os agentes de amea\u00e7as foram observados abusando do <strong>Microsoft Intune<\/strong> para implantar o malware \u201cCloudBurst\u201d usando scripts do PowerShell.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Essa ferramenta tamb\u00e9m se disfar\u00e7a como um arquivo leg\u00edtimo do Windows, mais especificamente, \u201cmscoree.dll\u201d, e sua fun\u00e7\u00e3o \u00e9 realizar a enumera\u00e7\u00e3o do sistema.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Desativando ferramentas EDR via zero-day<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Um segundo relat\u00f3rio publicado pela Mandiant hoje enfoca a t\u00e1tica <strong>\u201cbring your own vulnerable driver\u201d<\/strong> (BYOVD), seguida pela UNC2970 na \u00faltima campanha.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ao examinar os logs dos sistemas comprometidos, os analistas da Mandiant encontraram drivers suspeitos e um arquivo DLL estranho (\u201c_SB_SMBUS_SDK.dll\u201d).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ap\u00f3s uma investiga\u00e7\u00e3o mais aprofundada, os pesquisadores descobriram que esses arquivos foram criados por outro arquivo chamado \u201cShare.DAT\u201d, um conta-gotas na mem\u00f3ria rastreado como \u201cLightShift\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O dropper carrega um modulo ofuscado chamado \u201cLightShow\u201d, que utiliza o driver vulner\u00e1vel para executar opera\u00e7\u00f5es arbitr\u00e1rias de leitura e grava\u00e7\u00e3o na mem\u00f3ria do kernel.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O c\u00f3digo malicioso ent\u00e3o aplica hooks em rotinas do kernel usadas pelo software EDR (Endpoint Detection and Response) para evitar sua detec\u00e7\u00e3o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Notavelmente, o driver usado nesta campanha era um driver ASUS (\u201cDriver7.sys\u201d) que n\u00e3o era conhecido por ser vulner\u00e1vel no momento da descoberta da Mandiant, ent\u00e3o os hackers norte-coreanos estavam explorando uma falha de 0day.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A Mandiant relatou o problema \u00e0 ASUS em outubro de 2022, a vulnerabilidade recebeu o identificador <strong>CVE-2022-42455<\/strong> e o fornecedor a corrigiu por meio de uma atualiza\u00e7\u00e3o lan\u00e7ada sete dias depois.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Os hackers norte-coreanos anteriormente visavam pesquisadores de seguran\u00e7a envolvidos no desenvolvimento de vulnerabilidades e exploits, criando personas falsas de m\u00eddia social on-line que fingiam ser pesquisadores de vulnerabilidades.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Essas personas entrariam em contato com outros pesquisadores de seguran\u00e7a sobre uma poss\u00edvel colabora\u00e7\u00e3o na pesquisa de vulnerabilidades.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Depois de estabelecer contato com um pesquisador, os hackers enviaram projetos maliciosos do Visual Studio e arquivos MHTML que exploravam um Internet Explorer 0day.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ambas as iscas foram usadas para implantar malware nos dispositivos dos pesquisadores visados para obter acesso remoto aos computadores.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">IOC&#8217;s<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>IOC<\/strong><\/td><td><strong>Signature<\/strong><\/td><\/tr><tr><td>e97b13b7e91edeceeac876c3869cc4eb<\/td><td>PLANKWALK<\/td><\/tr><tr><td>a9e30c16df400c3f24fc4e9d76db78ef<\/td><td>PLANKWALK<\/td><\/tr><tr><td>f910ffb063abe31e87982bad68fd0d87<\/td><td>PLANKWALK<\/td><\/tr><tr><td>30358639af2ecc217bbc26008c5640a7<\/td><td>LIDSHIFT<\/td><\/tr><tr><td>41dcd8db4371574453561251701107bc<\/td><td>LIDSHOT<\/td><\/tr><tr><td>866f9f205fa1d47af27173b5eb464363<\/td><td>TOUCHSHIFT<\/td><\/tr><tr><td>8c597659ede15d97914cb27512a55fc7<\/td><td>TOUCHSHIFT<\/td><\/tr><tr><td>a2109276dc704dedf481a4f6c8914c6e<\/td><td>TOUCHSHIFT<\/td><\/tr><tr><td>3bf748baecfc24def6c0393bc2354771<\/td><td>TOUCHSHOT<\/td><\/tr><tr><td>91b6d6efa5840d6c1f10a72c66e925ce<\/td><td>TOUCHKEY<\/td><\/tr><tr><td>300103aff7ab676a41e47ec3d615ba3f<\/td><td>HOOKSHOT<\/td><\/tr><tr><td>49425d6dedb5f88bddc053cc8fd5f0f4<\/td><td>TOUCHMOVE<\/td><\/tr><tr><td>abd91676a814f4b50ec357ca1584567e<\/td><td>SIDESHOW<\/td><\/tr><tr><td>05b6f459be513bf6120e9b2b85f6c844<\/td><td>CLOUDBURST<\/td><\/tr><tr><td>hxxp:\/\/webinternal.anyplex[.]com\/images\/query_image.jsp<\/td><td>PLANKWALK C2<\/td><\/tr><tr><td>hxxp:\/\/www.fainstec[.]com\/assets\/js\/jquery\/jquery.php<\/td><td>PLANKWALK C2<\/td><\/tr><tr><td>hxxps:\/\/ajayjangid[.]in\/js\/jquery\/jquery.php<\/td><td>PLANKWALK C2<\/td><\/tr><tr><td>hxxps:\/\/sede.lamarinadevalencia[.]com\/tablonEdictal\/layout\/contentLayout.jsp<\/td><td>PLANKWALK C2<\/td><\/tr><tr><td>hxxps:\/\/leadsblue[.]com\/%77%70%2d%63%6f%6e%74%65%6e%74\/wp-utility\/index.php<\/td><td>LIDSHOT C2<\/td><\/tr><tr><td>hxxps:\/\/toptradenews[.]com\/%77%70%2d%63%6f%6e%74%65%6e%74\/themes\/themes.php<\/td><td>SIDESHOW C2<\/td><\/tr><tr><td>hxxp:\/\/mantis.quick.net[.]pl\/library\/securimage\/index.php<\/td><td>SIDESHOW C2<\/td><\/tr><tr><td>hxxp:\/\/www.keewoom.co[.]kr\/prod_img\/201409\/prod.php<\/td><td>SIDESHOW C2<\/td><\/tr><tr><td>hxxp:\/\/abba-servicios[.]mx\/wordpress\/%77%70%2d%63%6f%6e%74%65%6e%74\/themes\/config.php<\/td><td>SIDESHOW C2<\/td><\/tr><tr><td>hxxp:\/\/www.ruscheltelefonia[.]com.br\/public\/php\/index.php<\/td><td>SIDESHOW C2<\/td><\/tr><tr><td>hxxps:\/\/olidhealth[.]com\/%77%70%2d%69%6e%63%6c%75%64%65%73\/php-compat\/compat.php<\/td><td>CLOUDBURST C2<\/td><\/tr><tr><td>hxxps:\/\/doug[.]org\/%77%70%2d%69%6e%63%6c%75%64%65%73\/admin.php<\/td><td>CLOUDBURST C2<\/td><\/tr><tr><td>hxxps:\/\/crickethighlights[.]today\/%77%70%2d%63%6f%6e%74%65%6e%74\/plugins\/contact.php<\/td><td>CLOUDBURST C2<\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn<\/p>\n","protected":false},"author":2,"featured_media":428,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[92,36],"class_list":["post-426","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informativo","tag-linkedin","tag-malware"],"yoast_head":"<title>Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn - Tech Security\" \/>\n<meta property=\"og:description\" content=\"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-12T12:49:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"692\" \/>\n\t<meta property=\"og:image:height\" content=\"377\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn\",\"datePublished\":\"2023-03-12T12:49:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/\"},\"wordCount\":1159,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-12-malware_emprego1.jpg\",\"keywords\":[\"linkedin\",\"malware\"],\"articleSection\":[\"Informativo\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/\",\"name\":\"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-12-malware_emprego1.jpg\",\"datePublished\":\"2023-03-12T12:49:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-12-malware_emprego1.jpg\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-12-malware_emprego1.jpg\",\"width\":692,\"height\":377},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/","og_locale":"pt_BR","og_type":"article","og_title":"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn - Tech Security","og_description":"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn","og_url":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/","og_site_name":"Tech Security","article_published_time":"2023-03-12T12:49:24+00:00","og_image":[{"width":692,"height":377,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego1.jpg","type":"image\/jpeg"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"6 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn","datePublished":"2023-03-12T12:49:24+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/"},"wordCount":1159,"commentCount":1,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego1.jpg","keywords":["linkedin","malware"],"articleSection":["Informativo"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/","url":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/","name":"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego1.jpg","datePublished":"2023-03-12T12:49:24+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego1.jpg","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-12-malware_emprego1.jpg","width":692,"height":377},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2023\/03\/profissionais-de-ti-sao-alvo-de-novo-malware-por-meio-de-ofertas-de-emprego-no-linkedin\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"Profissionais de TI s\u00e3o alvo de novo malware por meio de ofertas de emprego no LinkedIn"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/426","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=426"}],"version-history":[{"count":1,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/426\/revisions"}],"predecessor-version":[{"id":429,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/426\/revisions\/429"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/428"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=426"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=426"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=426"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}