{"id":204704,"date":"2024-12-30T16:20:21","date_gmt":"2024-12-30T16:20:21","guid":{"rendered":"https:\/\/news.talkwithrattan.com\/index.php\/2024\/12\/30\/crypto-scammers-are-reportedly-posing-as-job-recruiters-to-circulate-malware\/"},"modified":"2024-12-30T16:20:21","modified_gmt":"2024-12-30T16:20:21","slug":"crypto-scammers-are-reportedly-posing-as-job-recruiters-to-circulate-malware","status":"publish","type":"post","link":"https:\/\/news.talkwithrattan.com\/index.php\/2024\/12\/30\/crypto-scammers-are-reportedly-posing-as-job-recruiters-to-circulate-malware\/","title":{"rendered":"Crypto Scammers Are Reportedly Posing as Job Recruiters to Circulate Malware"},"content":{"rendered":"
\"Crypto<\/div>


\n<\/p>\n

\n

Malicious crypto scammers have been found to be fishing for their victims posing as job recruiters online. Popular cyber investigator Taylor Monahan, who goes by the username @tayvano_, has posted an update to his 85,000 followers on X. As per the update, scammers are using recruiting platforms like LinkedIn to reach out to job seekers, asking them to fix issues with video-call software and subsequently injecting malicious malware to get access to the victims’ computers. Monahan works in the security division of crypto wallet MetaMask.<\/p>\n

The post, part of a thread on the threat, published by Monahan shared screenshots of the job listing circulated by the scammers. The post shows the fraudulent job opening of \u201cBusiness Development Lead\u201d at an entity named \u2018Halliday’. To entice people to apply for this senior level position, the post boasts an annual salary bracket of $300,000 (roughly Rs. 2.56 lakh) to $350,000 (roughly Rs. 2.99 lakh)<\/p>\n

Once job seekers end up answering questions, the scammers ask them to record a video answering the last question. On clicking the \u2018Request Camera Access’ button, another prompt pops up asking the people to fix an issue with the camera or the microphone.<\/p>\n

\u201cOnce you do it, Chrome will prompt you to update\/restart to \u2018fix the issue’. It’s not fixing the issue. There are SO many malicious actors who spend all day trying to trick you into copy\/pasting\/run code like this. It will always destroy you,\u201d the Web3 investigator noted.<\/p>\n

The screenshot posted by Monahan showed that the malicious \u2018fix the issue’ message pops up with the title \u201cAccess to your camera or microphone is currently blocked\u201d. The investigator also warned that the scammers could give varying instructions to potential victims for fixing the bug, depending on the system they use \u2013 Mac, Windows, or Linux.<\/p>\n

\n
\n

How it works \/ what we’ve seen:<\/p>\n

Usually starts with a “recruiter” from known company e.g. Kraken, MEXC, Gemini, Meta.<\/p>\n

Pay ranges + messaging style are attractive\u2014even to those not actively job hunting.<\/p>\n

Mostly via Linkedin. Also freelancer sites, job sites, tg, discord, etc. pic.twitter.com\/vRwJUoKFlB<\/a><\/p>\n

\u2014 Tay :sparkling_heart: (@tayvano_) December 28, 2024<\/a><\/p><\/blockquote>\n<\/div>\n

This malware lets the scammers access the victims’ systems through backdoor entries, which can subsequently let them get into crypto wallets and drain funds.<\/p>\n

\n
\n

If you follow their instructions, you are fucked.<\/p>\n

They vary depending whether you are on Mac\/Windows\/Linux.<\/p>\n

But once you do it, Chrome will prompt you to update\/restart to “fix the issue.”<\/p>\n

It’s not fixing the issue. It’s fully fucking you. pic.twitter.com\/ZEn2HpuAEb<\/a><\/p>\n

\u2014 Tay :sparkling_heart: (@tayvano_) December 28, 2024<\/a><\/p><\/blockquote>\n<\/div>\n

The FBI, in its recent report, claimed that crypto scammers had become more sophisticated in terms of identifying and attacking their victims. In July, the Securities division of the Washington State Department of Financial Institutions (DFI) also said<\/a> that scammers had spiked up activities posing as professors or academicians on platforms including Facebook, WhatsApp and Telegram to find and communicate with potential victims.<\/p>\n

Insiders from the crypto sector like Monahan have asked people to be vigilant and up to date with community alerts and warnings to prevent risking their funds. Earlier this year, Yi He, the co-founder of Binance, had flagged<\/a> an impersonation scam that was circulating on X where scammers were misusing her identity to promote a fake crypto token on X.<\/p>\n<\/div>\n