New Tactic: Fake Job Offers on LinkedIn
Hackers are now targeting cryptocurrency users through the popular professional platform LinkedIn. Their goal is to deceive users and gain access to their digital assets. This tactic is part of a broader trend of sophisticated cyberattacks that use various platforms to spread malware.
According to Web3 security expert Taylor Monahan, hackers leverage social media to distribute targeted propaganda, which installs malware on victims' devices. Once the malware is activated, victims lose control of their devices, allowing hackers to proceed with their attacks.
How Do Hackers Operate?
Fake Profiles and Building Trust
Hackers start by creating fake LinkedIn profiles that appear trustworthy, often impersonating representatives of well-known cryptocurrency platforms. They initiate conversations with users, aiming to build trust.
Enticing Job Offers
Once trust is established, hackers present victims with attractive job offers. These opportunities are often aimed at job seekers but can also appeal to those looking to boost their income.
To make the scam more credible, hackers use tools like Willo Video, a platform commonly used by crypto firms for recruitment. They provide victims with detailed job descriptions and tasks, such as recording interview responses.
Simulated Technical Issues
During the process, hackers often simulate technical issues with video features, enabling them to prolong the scam without raising suspicion.
How Do Hackers Gain Control?
Malicious Links and Device Compromise
In the next phase, hackers send victims a link containing malicious instructions. Clicking on the link automatically grants hackers control over the victim’s device.
According to Monahan, hackers employ different methods depending on the victim’s operating system (Mac, Windows, or Linux). For example, Chrome may prompt users to update or restart, which doesn’t solve the issue but instead grants full access to the hackers.
Past Attacks and Platform Responses
Similar Attack Cases
Similar attacks have previously targeted employees of the Japanese cryptocurrency company Ginco, which lost $305 million to hackers through social engineering schemes. These incidents have been investigated by the FBI and Japan’s National Police Agency.
LinkedIn's Countermeasures
In 2024, LinkedIn removed approximately 80 million fake profiles. Despite using automated systems to monitor and block accounts, the problem persists.
Warning to Users
Monahan warns the cryptocurrency community about these attacks, urging increased caution. Users should remain vigilant when communicating on social media and avoid clicking links from unknown sources. This incident highlights how hackers continue to evolve and find new ways to exploit people’s trust.
#CyberSecurity , #DigitalAssets , #CryptoNewss , #CryptoCommunity , #HackerAlert
Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“