Criminals Obtained Cryptocurrency by Accessing Devices via Microphone Infiltration
New Cybercrime Scheme Targeting Job Seekers in Cryptocurrency Companies Revealed
In a recent development, MetaMask developer Taylor Monahan has exposed a new cybercrime scheme that targets job seekers in the cryptocurrency industry. This scheme, first reported on Twitter with a warning from MetaMask, involves scammers posing as recruiters on various platforms such as LinkedIn, Discord, Telegram, and freelance websites for companies like Kraken, MEXC, Gemini, and Meta.
The job application process for these fraudulent positions is designed to appear legitimate. It involves a text-based interview via the Willo platform, where candidates are asked questions about the cryptocurrency market and tasked with developing a business expansion strategy. The final stage requires candidates to record a video response, during which a pop-up window requests access to the user's microphone and camera.
The scammers offer roles for technical specialists, traders, and analysts with salaries ranging from $200,000 to $350,000. However, the instructions provided by the scammers result in the installation of a backdoor on the victim's device, giving hackers access and enabling them to steal cryptocurrency assets. This attack targets macOS, Windows, and Linux operating systems.
While the exact number of victims and the total financial damage caused by this scam are not disclosed by Monahan, it serves as another reminder for job seekers to be cautious when applying for jobs, especially in the rapidly growing cryptocurrency industry.
The scam is believed to be similar to information stealers, but it is not clear how it actually steals information or assets from the victims. It is also important to note that this is not the first time such an attack has occurred. Previously, a similar attack on Japanese cryptocurrency exchange DMM Bitcoin resulted in losses of $308 million.
As always, it is crucial to verify the authenticity of job postings and to be skeptical of any requests for personal information or access to devices during the application process. Stay safe and secure in your job hunt in the exciting world of cryptocurrency!
- In the cryptocurrency industry, where Bitcoin is a major player in finance and technology, job seekers need to beware of cybersecurity threats such as the new scheme that poses as job opportunities at companies like Kraken, MEXC, Gemini, and Meta, requiring access to personal devices which can potentially lead to the theft of cryptocurrency assets.
- While investing in the evolving cryptocurrency market presents significant financial opportunities, it's crucial to prioritize cybersecurity measures, especially during the job application process, as schemes like the recently exposed one could potentially infiltrate devices through fake job postings for technical specialists, traders, and analysts offering six-figure salaries, similar to the previous instance at Japanese exchange DMM Bitcoin.
