The National Information Technology Development Agency (NITDA) has issued a warning about a new malware variant called “CovertCatch,” which cybercriminals are using on LinkedIn to target victims in sectors such as defense, media, technology, and academia through fake job offers.
JOIN US FOR MORE ON:
or
or Follow us on WhatsApp Channel
By posing as recruiters or providers of job opportunities, these threat actors lure users into downloading malicious files or clicking on harmful links. Once installed, CovertCatch can steal data, record keystrokes, and capture screen activity while remaining undetected.
NITDA emphasizes that the spread of CovertCatch malware via LinkedIn presents serious risks to both organizations and individuals. The malware, once embedded in a network or device, can exfiltrate sensitive information, potentially resulting in financial loss, reputational harm, and data breaches.
Additionally, the threat increases the chances of further cyberattacks, such as ransomware and system-wide compromises, posing significant risks to critical industries and essential services.
Preventive Measures:
- Organizations and individuals should be cautious of unsolicited job offers or recruitment messages on Linkedin, especially those requesting file downloads or linking to external sources.
- Regularly monitor for unusual login activities and enforce multi-factor authentication (MFA) for all accounts.
- Keep antivirus software up to date and scan regularly to detect anomalies promptly.
- Organizations should periodically audit Linkedin connections and restrict access to sensitive information based on role and necessity.