Recruitment Phishing Scam Imitates CrowdStrike Hiring Process

[Btcalysis]

There is a cryptojacking malware which is downloaded throught phishing attack. People that need jobs are the ones targeted. They will download an app through the phishing link. The fake app serves as a downloader for the XMRig cryptominer.

https://www.crowdstrike.com/en-us/blog/recruitment-phishing-scam-imitates-crowdstrike-hiring-process/

The malware are for Windows and macOS.

[Botnake]

This is quite new to me.. I didn’t realize this was possible. Scammers really are getting smarter. Thanks for taking the time to warn the community about this type of scam. I’ve also noticed some posts here about job recruitments where they aren’t transparent about the company they represent. That’s definitely a red flag, especially if they require you to download an app.

[EluguHcman]

This is quite new to me.. I didn’t realize this was possible. Scammers really are getting smarter. Thanks for taking the time to warn the community about this type of scam. I’ve also noticed some posts here about job recruitments where they aren’t transparent about the company they represent. That’s definitely a red flag, especially if they require you to download an app.

While scammers are being so remarkable smart and getting smarter than we could ever imagine, it is becoming threatening mal of navigating freely in the internet especially with the device comprising your valuable informations such as your wallets and doing away with them all is just to stay of from unreliable and unverified internet sources such as links and referrals links.

However, the strategy of the cryptojack is to manipulate users devices sophisticated to exploit with their devices unknowingly with malicious programs overweighting the victimized device functionality to execute their own (scammers) jobs.

[Churchillvv]

I think someone has said something similar before, I can't really remember the thread but it's seems similar to this, basically one can't be completely careful in the internet especially when you're ignorant of how phishing malwares operates then you're a prey to scammers.

It's our obligations to do propers research on whatever we wish to download, and it's such downloads are not from the official website then it should be avoided.

[Davidvictorson]

There is a cryptojacking malware which is downloaded throught phishing attack. People that need jobs are the ones targeted. They will download an app through the phishing link. The fake app serves as a downloader for the XMRig cryptominer.

https://www.crowdstrike.com/en-us/blog/recruitment-phishing-scam-imitates-crowdstrike-hiring-process/

The malware are for Windows and macOS.

Newbies, do not think that an antivirus will protect you from malware. You can get malware with an antivirus. The way I understand that this happens is that, an antivirus maker will define some rules that detect the presence of common malware unfortunately, it is not all malwares that are defined. And this is one of the ways that malwares can bypass an antivirus. That being said, once you are online, consider yourself a potential target. It doesn't matter the type of device you are using to connect to the internet. Don't download or open links that you do not trust. Also investigate thoroughly before you open. There is nothing that is online that people have not reviewed or discussed about. And there are people who share their good or bad experiences using such platforms. Just don't download anything from a site that you cannot verify.  

[Kelward]

Thanks to the OP for updating us on this recruitment phishing scam, scammers will never get tired of finding new schemes, neither should we relent in protecting ourselves. I've told all my loved ones never to click on anything that they're not familiar with on their devices that is connected online. Phishing sites is a dangerous tool that scammers have employed to steal from people, so we should not be in a hurry to click, we should first investigate the sources of any links. Scammers and hackers are looking for loopholes in every genuine links to scam people, therefore we don't need to take the chances of clicking what we don't have complete understanding.

[Dave1]

This is not new, we have seen this as the latest modus of criminals to try to find a victim here and steal their crypto. So I'm not surprised that they are still very hot on this kind of attacks, but this time, they will take advantage of your machine and install for a crypto miner.

So in this case if you are looking for a job and someone asked you to download something in your computer then you have to be very suspicious of it because this is one way to infect your computer with malware that can steal your crypto assets.

[NotATether]

XMRig is not malware since it's just the mining software that Monero uses, but I get why people would not consent to their compute power being wasted just so that someone can earn money. The good news is, these programs are usually easy to terminate: just send SIGKILL and then find the binary on the filesystem and delete it. Maybe any other binaries that invoked it as well.

[Botnake]

This is quite new to me.. I didn’t realize this was possible. Scammers really are getting smarter. Thanks for taking the time to warn the community about this type of scam. I’ve also noticed some posts here about job recruitments where they aren’t transparent about the company they represent. That’s definitely a red flag, especially if they require you to download an app.

While scammers are being so remarkable smart and getting smarter than we could ever imagine, it is becoming threatening mal of navigating freely in the internet especially with the device comprising your valuable informations such as your wallets and doing away with them all is just to stay of from unreliable and unverified internet sources such as links and referrals links.

However, the strategy of the cryptojack is to manipulate users devices sophisticated to exploit with their devices unknowingly with malicious programs overweighting the victimized device functionality to execute their own (scammers) jobs.

Since this is an application that needs to be installed, I’m wondering, won’t anti-malware detect it and block the installation on the PC? Anti-malware should flagged apps like this, especially if they’re from unknown sources. it’s true that it could monitor your computer once installed and potentially take control of it.

[avp2306]

There is a cryptojacking malware which is downloaded throught phishing attack. People that need jobs are the ones targeted. They will download an app through the phishing link. The fake app serves as a downloader for the XMRig cryptominer.

https://www.crowdstrike.com/en-us/blog/recruitment-phishing-scam-imitates-crowdstrike-hiring-process/

The malware are for Windows and macOS.

Heard about similar cases like this before and it seems these scammers continue to do this schemes then try to catch new set of victims.

With this incident goes back again I guess its better to make people aware especially our friends around about this scheme so that they will be notified that certain attacks happen thru online job hiring. Also people should not download anything and scan the app they are downloading to know if there's an issue so that they can avoid this potential phising attempt and other for of scams.

People should not be desperate to get the job and if they see to good to be true offers online better back off, since for sure there's something wrong with those offer they see.

[boyptc]

Many hackers and scammers are also taking advantage of people that are looking for employment. They'll give fake information of the company that they're putting on any job posts.

And when inquiries come, they'll give designated tasks that requires to download but these poor applicants don't know that they're being fooled.

So, if anyone in here is trying to apply for as much as they can. If something is odd with the recruitment process and the employer is wanting you to download unfamiliar tools, think of it before proceeding.

[joniboini]

Since this is an application that needs to be installed, I’m wondering, won’t anti-malware detect it and block the installation on the PC? Anti-malware should flagged apps like this, especially if they’re from unknown sources. it’s true that it could monitor your computer once installed and potentially take control of it.

From the article it seems like the malware won't trigger the codes they detect that an anti-malware app is running in the background. But the scammers can do many things to trick the users too, such as asking them to disable their anti-malware because it might trigger a false positive, trying to convince them that the algorithm used by their anti-malware app is faulty, etc. So the user needs to be cautious and notice that the app might be dangerous for them. CMIIW.

[cryptoaddictchie]

There is a cryptojacking malware which is downloaded throught phishing attack. People that need jobs are the ones targeted. They will download an app through the phishing link. The fake app serves as a downloader for the XMRig cryptominer.

https://www.crowdstrike.com/en-us/blog/recruitment-phishing-scam-imitates-crowdstrike-hiring-process/

The malware are for Windows and macOS.

This is interesting now even the famous macOS which usually have not been affected by such virus or malware are now being targeted too.

Is this new malware powerful enough to trigger from a potential victim device by simply downloading?

Ive heard of similar case but nost commonly are pre jobs about beta testnet for a game whoch if downloaded on PC they can access your keys.

[Moreno233]

There is a cryptojacking malware which is downloaded throught phishing attack. People that need jobs are the ones targeted. They will download an app through the phishing link. The fake app serves as a downloader for the XMRig cryptominer.

https://www.crowdstrike.com/en-us/blog/recruitment-phishing-scam-imitates-crowdstrike-hiring-process/

The malware are for Windows and macOS.

I have not seen this before neither has anyone mentioned it. Unfortunately a lot of people will likely fall victim to this because there are millions of people looking for job so the chances of them encountering this is very high. Well since it is phishing, there is definitely a way out which is using the official link of any platform to make downloads. I think we need to be more careful with everything we do on the internet because there are people out to cause serious damage to others through every given opportunity. Job offers especially remote job is one area that is trending so it is expected that scammers will target this direction.