The zip attachment contains an exe file: the malware itself. Stolen data is exfiltrated via SMTP.
Data from 92% of LinkedIn users is for sale on the dark web. A hacker stole the information of 700 million profiles out of the total 756 million. It seems that the data breach happened thanks to the API
The information of 92% of LinkedIn users has been compromised and is for sale on the dark web. The cybersecurity experts of E Hacking News denounce this, adding that the data would refer to over 700 million profiles out of the total 756 million. It seems that a hacker has, in fact, come into possession of a new dataset that contains telephone numbers, addresses, geo-location and salaries. Moreover, according to several researchers, the data are authentic and updated to a period between 2020 and 2021. The same platform in April reported having suffered a data breach that impacted 500 million users, with their personal information displayed online. The criminal hacker, contacted by 9to5Google, claimed to have obtained the PIIs using the LinkedIn API to collect what users uploaded to the site.