Iran-linked Charming Kitten hackers have been running a ‘dream job’ campaign targeting the aerospace industry with the SnailResin malware.

Iranian hackers are targeting LinkedIn users with enticing job offers intended to trick them into running Windows-based malware, according to security researchers. The hackers pose as fake recruiters on LinkedIn and send "dream job" offers to prospective targets.

Suspected Iranian hackers have been spreading malware through fake job offers that fool targets into downloading a malicious ZIP file, according to a cybersecurity firm.

"The campaign distributed the SnailResin malware, which activates the SlugResin backdoor," Israeli cybersecurity company ClearSky said in a Tuesday analysis. TA455, also tracked by Google-owned Mandiant as UNC1549 and Yellow Dev 13,