A new cybersecurity threat is impacting professionals in the web3 space, as crypto scammers exploit fake job interviews to install malware on targets’ devices under the guise of lucrative job offers. The scheme was recently exposed by on-chain investigator Taylor Monahan, who highlighted the method employed by bad actors impersonating recruiters from top crypto firms. These scammers reach out to potential victims through professional networks like LinkedIn and other platforms.
Once the victim is engaged, they are directed to a seemingly legitimate video interviewing platform named “Willo | Video Interviewing.” Here, the applicants are queried about industry trends to establish trust and legitimacy. The scam unfolds during a supposed technical issue with the victim’s microphone or camera in the final stages of the interview. The platform then provides a troubleshooting guide, which actually contains harmful instructions that, if followed, give the attackers backdoor access to the victim’s system.
Monahan warns that executing these steps allows scammers to infiltrate the user’s device, enabling them to bypass security measures, install malware, monitor activities, steal sensitive information, and drain cryptocurrency wallets without detection. Users are advised to not run any unfamiliar code and, if affected, to completely wipe their systems to prevent further sabotage.
This incident marks a deviation from traditional recruitment scams, aligning with other recent security findings. Earlier this month, Cado Security Labs uncovered a fake meeting application injecting malware that could drain wallets and steal credentials. Similarly, scams targeting blockchain developers on freelancing platforms have been documented, involving the downloading of malicious software that compromises systems.
In light of these threats, affected individuals are urged to take immediate action to secure their devices and remain vigilant against future threats disguised as job opportunities in the crypto industry.
