As the world becomes increasingly digital, cybercriminals are finding new and innovative ways to steal personal and sensitive information from unsuspecting victims. One of the latest techniques to emerge is “malverposting,” a type of cyber threat that involves the creation of fake online content to distribute malware.

Recently, a Vietnamese threat actor made headlines by using malverposting to distribute malware to more than 500,000 victims. The attacker used fake job postings on popular employment websites to lure victims into downloading and installing malware on their devices. Once the malware was installed, the attacker was able to gain access to sensitive information, such as banking details and login credentials.

So, what exactly is malverposting, and how can you protect yourself against it?

Malverposting is a form of malvertising, which involves the use of online advertisements to spread malware. In the case of malverposting, cybercriminals create fake job postings, news articles, or other types of online content that appear legitimate but contain malicious code. When a victim clicks on a link or downloads a file from the fake content, the malware is installed on their device.

Protecting against malverposting and other types of cyber threats is especially important in the workforce, where sensitive company data and intellectual property are at risk. 

Here are some suggestions to help protect against malverposting attacks in the workplace

1. Educate employees: Provide regular training to employees on how to identify and avoid malicious content, such as fake job postings or phishing emails. Encourage them to be cautious when clicking on links or downloading files from the internet.
2. Use content filtering: Use content filtering software to block access to known malicious websites and to prevent employees from accessing inappropriate or potentially harmful content.
3. Implement strict access controls: Use access controls to limit employee access to sensitive company data and intellectual property. This can help prevent unauthorized access and reduce the risk of data breaches.
4. Use security software: Install and use security software, such as antivirus and anti-malware software, on all company devices to detect and remove malicious content.
5. Conduct regular security audits: Conduct regular security audits to identify vulnerabilities and gaps in your security controls. Use the findings from the audits to improve your security posture and reduce your risk of cyber attacks.