Fake Recruiter Profiles and Malware Delivery

[cryptohog]

DeceptiveDevelopment operators create fake or hijacked profiles on platforms like LinkedIn, Upwork, Freelancer.com, and Crypto Jobs List. They pose as recruiters and lure developers with coding challenges or pre-interview tasks.

Victims may be asked to record a video for a fake interview site. When “technical errors” occur, instructions provided lead to malware installation, including BeaverTail, OtterCookie, WeaselStore, and the InvisibleFerret remote access tool.

[Nahid10]

These fake recruiter scams are getting too real. Even professionals fall for them now.

[EmTeam]

It’s scary how social engineering is now the main delivery system for malware. Awareness is key.

[JanEmil]

Have a remote desktop. Fill it with gay p*rn and have scammers to install their "tools" there. Have seen some funny clips with people that have fun with the scammers that way.

[The_Walking_Dead]

Unbelievable how advanced these scams have become Even legit-looking job posts can be traps now — devs really need to double-check domains and recruiters before engaging 🧠️

[Pitchfork_IS_power]

Nice ofc