Cybercriminal group TA505 is using business email compromise tactics to target HR departments. The cybercriminal gang sent phishing emails impersonating job applicants that contained Trojanized versions of curriculum vitae files. The files contained commercially available malware that allowed the attackers to disguise their movements, steal data and credentials and gave them the ability to encrypt data. The attacks targeted human resources departments at several German companies, but the techniques are easily transferable to victims in other parts of the world. The TA505 gang has been implicated in large-scale spam campaigns and distribution of Trojans such as Dridex and Locky and Jaff ransomware.”]
Source: https://www.inforisktoday.com/bec-campaign-targets-hr-departments-report-a-13997