Iranian hackers appear to be using enticing job offers to trick users on LinkedIn into running Windows-based malware, according to security researchers. The hackers have been posing as fake recruiters on LinkedIn and then offering “dream job” offers to prospective targets.

"The campaign distributed the SnailResin malware, which activates the SlugResin backdoor," Israeli cybersecurity company ClearSky said in a Tuesday analysis. TA455, also tracked by Google-owned Mandiant as UNC1549 and Yellow Dev 13,

Iran is building a “defensive” tunnel within Tehran’s metro network over fears of further Israeli strikes on the capital.