Phishing for Jobs: Fake Recruiters Offer Crypto-Mining Careers!

Cybercriminals are impersonating CrowdStrike recruiters to distribute cryptominers. Victims receive a fake interview email leading to a malicious site, offering downloads for both Windows and macOS. The downloaded file, written in Rust, evades detection to install the cryptominer XMRig. CrowdStrike warns job seekers to verify communications and avoid downloading software for interviews.

Hot Take:

Who knew that a job interview could turn into a mining operation faster than you can say “You’re hired!” These cybercriminals have taken “working remotely” to a whole new level by remotely working your computer for cryptocurrency!

Key Points:

  • Cunning cybercriminals are impersonating CrowdStrike recruiters to distribute cryptominers.
  • Victims are lured in by fake interview invitations, leading them to download malicious software.
  • The scam targets both Windows and macOS users, despite delivering a Windows executable.
  • Scammers put in extra effort to mimic CrowdStrike branding and operations.
  • CrowdStrike advises job seekers to verify any recruitment communications and avoid downloading executables.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here