Recently, malicious crypto scammers have been discovered targeting job seekers by posing as recruiters on professional networking platforms like LinkedIn. The cybercriminals lure the victims with high-paying job offers and inject malware into their systems once they engage. The updated warning came from popular cyber investigator Taylor Monahan, a security expert at MetaMask, who shared this emerging threat with his 85,000 followers on X (formerly Twitter).
Scammers Using Bogus Job Postings
The scammers, for example, have been posting fake job postings that included a “Business Development Lead” position with a firm called “Halliday.” To make the ‘job posting’ seem legitimate, the posting ‘boasts’ an annual salary between $300,000 (about ₹2.56 crore) and $350,000 (about ₹2.99 crore). The interests from the job applicants create a scenario for the recruiters to capitalize on through a video-call interview process.
Malicious Malware Injection
Through this whole call-making procedure, the swindlers teach the victims to troubleshoot believed problems related to their webcam and microphone. As soon as the victim clicks to ask for a “Request Camera Access” option, pop-up arises that requests users to mend some issue relating with device apparatus, which often leads to “Updates Required / Restart Needed in order to solve the said problem with your device,”. However, this is actually part of the scam to inject malicious malware into the victim’s system.
Monahan warns that such actions, disguised as solutions to technical issues, can give scammers access to the victim’s computer via a backdoor entry. Once they gain access, the malware allows them to compromise crypto wallets, potentially draining funds.
Warnings from Cybersecurity Experts
Monahan shared a screenshot of the malicious message that victims are presented with, which claims that “Access to your camera or microphone is currently blocked.” He explained that scammers may tailor their instructions to different operating systems, like Mac, Windows, or Linux, further confusing and trapping the victim. Monahan cautioned that the scam’s goal is to trick victims into running malicious code that can destroy their systems or allow hackers access to sensitive information, including crypto wallet details.
FBI and DFI Reports on Crypto Scammers
The FBI just issued a report which outlined the evolution of how crypto scammers have developed into being sophisticated in their operation. They have been able to find most of their targets on multiple platforms, social media in particular, using techniques that are more sophisticated than usual. Additionally, Washington State’s DFI Securities division noted that the scam cases involving impersonating professors or academicians through Facebook, WhatsApp, and Telegram have been increasing lately.
Community Vigilance and Alerts
Monahan and other industry insiders have asked people to remain vigilant and alert about ongoing scams and security threats in the crypto space. He advises users to keep software updated and follow community alerts to avoid falling victim to scams. Earlier this year, Yi He, the co-founder of Binance, also cautioned that there was a similar scam going on X, where scammers had impersonated her identity to promote fake crypto tokens.
The complexity of the scams calls for the utmost care from the job seeker and crypto enthusiast as they navigate the world of online recruitment or offers. With increased awareness of the new wave of cyber threats, it can prevent devastating losses and protection of personal and financial data.