A new sophisticated attack is targeting web3 professionals by tricking them into fake job interviews conducted by crypto scammers posing as recruiters.
Essence of the attack
On December 28, on-chain investigator Taylor Monahan discovered a scam where bad actors pose as recruiters for reputable crypto firms, approaching victims with job offers on platforms such as LinkedIn and Telegram.
How the attack unfolds
Once interested, victims are directed to a video interview platform called 'Willo | Video Interviewing'. During the final stages of the interview, a technical issue prompts victims to follow malicious instructions, unknowingly granting access to their devices.
Consequences and precautions
This access could allow attackers to bypass security measures, install malware, monitor activities, steal data, or drain cryptocurrency wallets. Monahan advises against running unfamiliar code and recommends those exposed to such threats to wipe their devices clean.
The attack deviates significantly from typical recruitment scams. It is crucial to be cautious and not trust unfamiliar resources requesting unusual actions.
