Fake job offers on Google Forms install PureHVNC trojan that steals passwords and crypto
by Adam Bream
Fake job interviews on Google Forms are installing the PureHVNC trojan. Malwarebytes found forms impersonating real companies in finance and tech, linking to ZIP files that deploy a multi-stage infection chain with DLL hijacking and crypto wallet theft.
Read more →