A fake CV in HR inboxes put XWorm on industrial control systems. https://intel.threadlinqs.com/threat/TL-2026-4913?utm_source=bluesky #ThreatIntel #BackdoorMSILXWorm #XWorm #Curriculumvitaecatalina

Kaspersky ICS CERT: phishing scripts, spyware and stealthy miners still dominate OT hosts in Q1. https://intel.threadlinqs.com/threat/TL-2026-4930?utm_source=bluesky #ThreatIntel #BackdoorMSILXWorm #AutoCAD #xmrig

A fake 'Curriculum Vitae' EXE is feeding XWorm into European industrial networks via HR inboxes. https://intel.threadlinqs.com/threat/TL-2026-4915?utm_source=bluesky #ThreatIntel #BackdoorMSILXWorm #XWorm #Curriculumvitaecatalina

A fake resume in HR's inbox is dropping XWorm backdoors onto industrial networks worldwide. https://intel.threadlinqs.com/threat/TL-2026-4899?utm_source=bluesky #ThreatIntel #BackdoorMSILXWorm #XWorm #MinerC

A fake resume.exe is the XWorm backdoor aimed at HR - and it is reaching ICS networks across Asia. https://intel.threadlinqs.com/threat/TL-2026-4897?utm_source=bluesky #ThreatIntel #BackdoorMSILXWorm #XWorm #xmrig