A modern-day scam -- spearphishing attack with fake employment opportunity
AI summary of the linked articleWeb3 employment scams use fake job offers to get victims to install malware, and the text breaks down how one such campaign, SpectraChat/SpectraSocial, drains crypto wallets. Scammers identify targets through public ENS domains, marking wallets holding more than 10k USD, then build friendships over DMs before offering a job that requires installing software or running a repository. The installer, described as a .exe, hijacks the browser, can remotely control it, and replaces copied 0x wallet addresses with the scammers' own. In tests described in the text, a seed phrase left on the desktop was not taken and no other machines on the network were affected. |
2 comments  og.scottrepreneur.ethSubmitter Someone close to me recently experienced this attack! Be careful out there. Tough spot for vulnerable folks looking for change and new positions. If you're being rushed through the process, check twice when downloading anything! Even spoiled dependencies in a cloned repo are at risk potentially (scary). Check out OfficerCIA's guide to revamp your setup: https://github.com/OffcierCia/Crypto-OpSec-SelfGuard-RoadMap  Agreed! I‘ve fallen prey to this too. A scammer sent me an email about a payment not processing due to an outdated credit card. The scammer happened to know which domain name service I use. In the metro on my work, I saw the email and I was like „fuck, let‘s just get this over with,“ so I quickly added my credit card details into the website. Jokes on me, a few hours later I found out that the link was fake. I contacted VISA etc. It was such a mess and at the end of the day 2000€ had been withdrawn. |