This one is worth knowing especially for people working in crypto and IT.
So there's a group called WaterPlum from North Korea, also known as Contagious Interview, and it was reportedly using fake job interviews to infect applicants' computers. According to the
joint security advisory, around 30,000 devices from different countries were already infected, and more than 7,000 crypto wallets were affected, with around $10.7 million in crypto stolen.
It's very dangerous because the method looks so normal for people who are applying for developer jobs, and this is what these fake recruiters usually do:
Send a coding test or project
● ask the applicant to download and run it
● sometimes ask them to fix a supposed video call problem
● malware gets installed
● once the malware is there, they can steal credentials, wallet data and other sensitive information.
The problem here is that downloading code or doing a coding test is normal during job applications, so some people might not suspect anything.
For me this is quite new compared to the more common impersonation scams, fake investments and other schemes we normally hear about. Now they are even targeting people who are already working in the IT and crypto space, which shows that even technically knowledgeable people can still be targeted if the method looks normal enough.
More details about the attack
