Lazarus Strikes Again: The ClickFix Con Job That’s Duping Job Seekers and Draining Crypto Wallets
Lazarus is back with the latest “ClickFix” attack, targeting job seekers with fake interviews to steal cryptocurrency. The North Korean cybercriminal group is impersonating major companies to lure victims into downloading malware. With a track record of success, Lazarus aims to fund the North Korean government through these deceptive tactics.
Hot Take:
Just when you thought job interviews couldn’t get any worse, along comes North Korea’s Lazarus group with a “ClickFix” twist. Forget awkward silences and weird interview questions—now you’ve got to worry about downloading malware while you’re at it. Talk about a hostile work environment!
Key Points:
- Lazarus is using a new social engineering tactic called “ClickFake Interview” to target job seekers.
- The campaign aims to steal cryptocurrency and sensitive data through fake job interviews.
- Targets include employees from centralized finance organizations with limited tech expertise.
- The attack method involves impersonating well-known companies such as Coinbase and Kraken.
- Victims are tricked into downloading malware disguised as a driver to “fix” a fake error.
Already a member? Log in here