Russian hackers target HR departments with vicious new ‘BlackSanta’ malware
Tech Radar
3월 11, 2026
Russian hackers have been targeting Human Resources (HR) departments at various organizations around the world with a never-before seen piece of malware called BlackSanta.
HR departments are being targeted with fake resumes that disable security protection
Cybernews
3월 11, 2026
A threat campaign against human resource (HR) departments has recently been launched. What seems like a decent resume actually is malicious software that kills security defenses, including antivirus programs and Endpoint Detection and Response (EDR) tools.
‘BlackSanta’ Malware Activates EDR and AV Killer Before Detonating Payload
Security Week
3월 11, 2026
The malware disables antivirus and EDR protections at the kernel level, clearing the path for credential harvesting, system reconnaissance, and eventual data exfiltration.
BlackSanta ‘EDR-killer’ malware targets HR departments
SC Media
3월 11, 2026
A specialized “EDR-killer” malware module known as BlackSanta has been discovered operated by a Russian-speaking threat actor that primarily targets human resource and recruitment personnel.
BlackSanta Malware Targets HR Staff with Fake CV Downloads
Hack Read
3월 11, 2026
Aryaka researchers have identified a new threat from a Russian-speaking group using ‘BlackSanta’ malware. By disguising attacks as job applications, hackers are bypassing security to target recruitment workflows.
BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign
InfoSecurity Magazine
3월 11, 2026
A new malware campaign targeting human resources and recruiting staff has seen attackers distribute malicious files disguised as job applications.
HR Departments Targeted by Multi-Layered BlackSanta EDR Killer Malware
GBHackers
3월 11, 2026
Threat actors are increasingly targeting human resources (HR) departments by disguising malware as job application documents.
BlackSanta Malware Shuts Down Protections, Targets HR and Recruiting Operations
Security Boulevard
3월 11, 2026
Russian threat actors have targeted HR employees and recruiters for more than a year with a sophisticated campaign that includes seemingly legitimate files disguised as resumes and new a malware component that can disable endpoint detection and response (EDR) and antivirus protections.
Resumés with malicious ISO attachments are circulating, says Aryaka
csoonline
3월 11, 2026
HR staff need to understand that these unfamiliar files execute commands and shouldn’t be opened.
‘BlackSanta’ EDR Killer Targets HR Workflows
Dark Reading
3월 10, 2026
A campaign by Russian-speaking cyberattackers hijacks workflows to deliver security-busting malware, allowing attackers to steal data without detection.
Fake job applications pack malware that kills endpoint detection before stealing data
The Register
3월 10, 2026
A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware which can disable security tools before stealing data from infected machines.
New ‘BlackSanta’ EDR killer spotted targeting HR departments
Bleeping Computer
3월 10, 2026
For more than a year, a Russian-speaking threat actor targeted human resource (HR) departments with malware that delivers a new EDR killer named BlackSanta.
