aiqbench analysis
This article details a social engineering campaign targeting software developers with fake job offers designed to distribute cross-platform Remote Access Trojans (RATs). The primary subject is cybersecurity threats specifically exploiting the AI-assisted coding workflows and trust inherent in developer communities, making it relevant to the broader context of AI safety and operational security.
Hackers Use Fake LinkedIn Job Offers to Infect Developers With New Cross-Platform RATs

Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses recruiter personas on LinkedIn and other employment platforms to deliver projects that appear safe enough to run. The operation is attributed to the Iran-linked group Mirage Kitten, also known as UNC1549. […] The post Hackers Use Fake LinkedIn Job Offers to Infect Developers With New Cross-Platform RATs appeared first on Cyber Security News.
Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses recruiter personas on LinkedIn and other employment platforms to deliver projects that appear safe enough to run. The operation is attributed to the Iran-linked group Mirage Kitten, also known as UNC1549. It delivers NodeRabbit and PollCat, two newly documented remote access trojans that work on Windows, Linux,…
Excerpt shown under the publisher's RSS terms · 71 words · full text and figures are on the publisher's site
Related coverage

Hackers Pose as Recruiters and Send Fake Coding Tests to Infect Software Developers
Cybersecurity News · Sep 1, 2026

Hackers Turned Ethereum Into a Secret Messaging System for Malware
Cybersecurity News · Sep 29, 2026

Hackers Hijack HBO Max Reddit Account to Push 108 ClickFix Malware Ads
Cybersecurity News · Sep 15, 2026

North Korean Hackers Hide OTTERCOOKIE Malware in SVG Images to Backdoor Developers
Cybersecurity News · Jul 20, 2026