Image by SCARECROW artworks, from Unsplash

Hackers Target Job Seekers With New “Vampire Bot” Malware

• Written by Kiara Fabbri Former Tech News Writer
• Fact-Checked by Sarah Frazier Former Content Manager

Vietnamese hackers are using fake job offers to trick professionals into installing Vampire Bot, a new malware that steals data and enables surveillance.

In a rush? Here are the quick facts:

• Fake job offers hide malware disguised as PDFs and ZIP files.
• Vampire Bot steals data, screenshots, and enables remote access.
• Infection chain uses fake Marriott job description to trick victims.

A Vietnamese hacking group known as BatShadow has been linked to a new cyber campaign that targets job seekers and digital marketing professionals using fake job offers to spread malware.

The campaign, which was first reported by The Hacker News , delivers a previously unknown malicious program called Vampire Bot.

According to researchers Aditya , “The attackers pose as recruiters, distributing malicious files disguised as job descriptions and corporate documents. When opened, these lures trigger the infection chain of a Go-based malware.”

The attacks start with ZIP files that contain decoy PDFs and malicious shortcut or executable files made to look like PDFs. Once opened, these files run hidden PowerShell scripts that download additional malware components from an external server.

One lure document pretends to be a marketing job offer at Marriott, while the downloaded malware installs XtraViewer, a remote desktop tool likely used to gain ongoing access to the victim’s computer.

Victims are then tricked into clicking on fake “preview” links that lead to deceptive web pages. These pages claim the user’s browser is unsupported and tell them to open the file in Microsoft Edge.

When they do, a ZIP file automatically downloads containing the fake job description and the real malware — a file named “Marriott_Marketing_Job_Description.pdf.exe.”

The Vampire Bot malware, written in the Go programming language, can steal personal data, take screenshots, and communicate with an attacker-controlled server at api3.samsungcareers[.]work.

BatShadow’s ties to Vietnam were uncovered through a known IP address (103.124.95[.]161) previously linked to Vietnamese hacker groups.

Researchers say the group has been active for at least a year, reusing similar fake domains like samsung-work[.]com to spread other malware families, including Agent Tesla, Lumma Stealer, and Venom RAT.

Aryaka warned, “The BatShadow threat group continues to employ sophisticated social engineering tactics to target job seekers and digital marketing professionals.”

Image by Solen Feyissa, from Unsplash

Families Sue Meta and TikTok Over Child Safety Failures

• Written by Kiara Fabbri Former Tech News Writer
• Fact-Checked by Sarah Frazier Former Content Manager

A group of Italian families has filed a lawsuit against Facebook, Instagram, and TikTok, accusing the platforms of failing to protect children from addictive and harmful online behavior.

In a rush? Here are the quick facts:

• The lawsuit claims platforms fail to verify users under 14.
• Plaintiffs say algorithms harm children’s mental health and behavior.
• Over 3 million underage Italian users are estimated on social media.

The case, first reported by Reuters , claims the companies do not properly enforce age restrictions and use algorithms that negatively affect minors’ mental health.

The plaintiffs want a Milan court to force the platforms to implement stronger age-verification systems for users under 14, as required by Italian law. The lawsuit also calls for greater transparency about how social media use can impact children’s well-being.

The case, filed by law firm Ambrosio & Commodo along with the Italian Parents’ Movement (MOIGE), is expected to be heard by the court’s business chamber in February 2026.

“It’s too easy for children to bypass the age ban. This action is about stopping conduct that is harmful to a large number of individuals,” said lawyer Renato Ambrosio in a statement sent to Reuters.

A Meta spokesperson said the company is “committed to keeping young people safe online” and that “teen safety should be an industry-wide priority.”

They added, “With Teen Accounts we provide default protections for teens limiting who can contact them, the content they can see, and how much time they spend on Facebook and Instagram. We also have measures in place to prevent teens from lying about their age.”

TikTok did not immediately respond to Reuters’ request for comment.

The lawsuit comes amid growing global concern over how social media affects minors. Governments in countries such as Australia and across Europe are considering measures to limit minors’ use of these platforms.

In the U.S., the same companies face multiple lawsuits accusing them of addicting millions of young users.

In Italy, the plaintiffs estimate that over three million underage users are active across Facebook, Instagram, and TikTok, with reported effects including depression, sleep deprivation, eating disorders, and academic decline.