Hackers use $200K job scam to steal crypto via malware

Hackers are employing a new strategy to deploy malware, targeting individuals in the crypto sector with fake job offers that exploit their devices and steal sensitive information.

According to blockchain investigator Taylor Monahan, hackers pose as recruiters for well-known crypto companies and offer roles with salaries ranging from $200,000 to $350,000.

The scammers initiate the process through professional platforms like LinkedIn, freelancer sites, Discord, and Telegram, advertising positions such as business development managers or analysts.

Instead of using traditional tactics like malicious PDFs, the attackers ask victims to address microphone and camera access issues during a simulated video interview.

“If you follow their instructions, you are fucked,” Monahan explained.

The scammers instruct candidates to grant access to their devices under the guise of fixing cache problems.

This process prompts victims to update or restart their browser, unknowingly installing malware that grants hackers backdoor access to their systems.

The malware can potentially drain victims’ cryptocurrency wallets or compromise sensitive data.

“Ultimately they’ll rekt you via whatever means are required,” Monahan added.

The method has been effective across operating systems, including Mac, Windows, and Linux.

During the scam, candidates are asked to complete a series of interview questions, including industry-specific topics like emerging crypto trends and strategies for expanding partnerships on limited budgets.

Monahan recommends that anyone exposed to the malware should immediately wipe their devices to mitigate risks.

“Everyone needs to be careful and remain sceptical,” the investigator stated, emphasising the importance of caution.

This evolving scam reflects the sophistication of cyber threats targeting the cryptocurrency sector, where attackers exploit trust and technology to access digital assets.