Operation Hanoi Thief: Threat Actor targets Vietnamese IT professionals and recruitment teams

A sophisticated spear-phishing campaign dubbed "Operation Hanoi Thief" is targeting Vietnamese IT and HR professionals with fake resumes that deploy a multi-stage, stealthy information-stealer (LOTUSHARVEST) via malicious shortcut and polyglot payloads, exfiltrating browser credentials and history to attacker infrastructure likely linked to a Chinese-origin threat actor.