Fake Job Interviews Are Becoming a Crypto Security Threat

[nihalsari]

Cybersecurity researchers at ESET have uncovered new activity from a North Korea–linked group known as DeceptiveDevelopment, which targets freelance developers to steal cryptocurrency. The group poses as recruiters, using fake profiles and job offers to lure developers working on crypto and Web3 projects across Windows, macOS, and Linux systems.

Once trust is established, victims are asked to complete coding challenges or interview tasks that secretly contain malware. Despite using relatively simple tools, the attackers rely on highly convincing social engineering, successfully tricking even experienced developers into installing malicious software that drains wallets and steals credentials.

[madmax]

fake recruiter scams hitting devs feels extra evil somehow