[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqRtDB34JNrtIJePvao4aaTfP9xyrSD03XVP3WiUOkc8":3},{"article":4,"iocs":36,"watch_terms":40},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":10,"entities":15,"category_id":16,"category":17,"article_tags":20},"23d4df93-350d-4522-b207-0abaf5fbf74a","'BlackSanta' EDR Killer Targets HR Workflows","blacksanta-edr-killer-targets-hr-workflows","A campaign by Russian-speaking cyberattackers hijacks workflows to deliver security-busting malware, allowing attackers to steal data without detection.","A Russian-speaking cybercriminal campaign dubbed 'BlackSanta' delivers EDR-killing malware through hijacked HR workflows to compromise security defenses and enable undetected data theft. The attack leverages workflow automation to bypass endpoint detection and response solutions, allowing attackers to operate covertly within compromised environments.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fthreat-intelligence\u002Fblacksanta-edr-killer-hr-workflows","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltba97bdde474d59f9\u002F69b02c2c10c21d00f4563cf1\u002Fsanta-Tatiana_Koroleva-alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale","2026-03-10T13:30:00+00:00","2026-03-14T09:41:10.370894+00:00",[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":16,"icon":10,"name":18,"slug":19},"Malware","malware",[21,26,31],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":32},{"id":33,"icon":10,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37],{"type":19,"value":38,"context":39},"BlackSanta","EDR killer malware used to disable security defenses in targeted attacks",[]]