Crypto Con: CrowdStrike Phishing Scam Mines for Laughs and Digital Dollars
CrowdStrike warns of a phishing scam using its branding to disguise a cryptocurrency miner as a fake recruitment CRM tool. Victims are lured with job offers, only to have the XMRig miner secretly installed. Remember, if it sounds too good to be true, it’s probably a cryptominer in disguise!
Hot Take:
Looks like the phishers have gotten a bit too “cryptic” with their job offers! Job seekers, beware of any recruiter asking you to mine for job prospects… literally. CrowdStrike’s fake recruitment ploy is not the kind of career you want to dig into!
Key Points:
- Phishing campaign mimics CrowdStrike branding to deliver a cryptominer.
- Victims are tricked into downloading a fake CRM application during a phony recruitment process.
- Malware conducts checks to evade detection before deploying the XMRig cryptominer.
- Trend Micro warns of a fake PoC for LDAPNightmare targeting security researchers.
- Both attacks illustrate sophisticated social engineering tactics exploiting current trends.
Already a member? Log in here