Hackers Use Fake Web3 Job Interviews To Steal Cryptocurrency From Job Seekers
Hackers posing as a legitimate Web3 company have targeted job seekers in the crypto industry, stealing cryptocurrency through a fake job interview scam. The group, known as 'Crazy Evil,' set up a fake company called ChainSeeker.io and advertised jobs like 'Blockchain Analyst' and 'Social Media Manager' on LinkedIn, WellFound, and CryptoJobsList. They used premium advertisements to increase the visibility of their job offers and contacted applicants via email, directing them to a 'chief marketing officer' (CMO) on Telegram.
The CMO asked job seekers to download a virtual meeting tool called GrassCall, which was actually a tool for installing malware on their systems. Once installed, the malware accessed sensitive information, including crypto wallets, passwords, and authentication data stored in web browsers. This malware was designed to drain funds from crypto wallets, and many victims lost their entire holdings. A Telegram support group has been created by affected users, where they share advice on how to remove the malware from Windows and Mac devices.
This attack is not the first of its kind. Earlier reports by Recorded Future revealed that Crazy Evil had executed similar scams targeting DeFi professionals. Their tactics include exploiting social engineering to trick individuals into downloading harmful software. The group has also used Zoom links in previous campaigns to spread malware. The GrassCall scam serves as a reminder of the ongoing risks in the cryptocurrency industry, where cybercriminals are increasingly targeting professionals with valuable assets.
In addition to this attack, other hacker groups, including the North Korean BlueNoroff, have been linked to scams targeting the crypto industry. BlueNoroff, part of the Lazarus Group, has used phishing emails and fake documents to steal funds from crypto firms. Their most recent campaign, 'Hidden Risk,' disguised malware as legitimate documents and targeted crypto firms with similar tactics to the Crazy Evil group's approach.
As the use of digital assets grows, cybercriminals are adapting by exploiting emerging job markets and targeting crypto professionals. Experts recommend caution when engaging with unfamiliar hiring processes, especially when asked to download unknown applications. If a job offer requires installing software that seems suspicious, it should be treated as a potential red flag. Cybersecurity experts also advise job seekers in the Web3 and crypto sectors to remain vigilant and aware of these types of scams.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
New York Post
19 minutes ago
- New York Post
Inside Israeli Embassy shooter Elias Rodriguez's fan club
Elias Rodriguez is accused of brutally murdering two Israeli embassy staffers — but a sick fan club cheering on his action is growing around him. A twisted online community has exploded supporting the suspected terrorist: Writing him letters in jail, petitioning for his release, and celebrating his crime as part of the so-called 'global intifada.' The Post infiltrated several popular Telegram channels which circulate op-eds, petitions and even stickers in support of the accused murderer. 8 Elias Rodriguez was arrested for allegedly shooting Yaron Lichinsky and Sarah Pilgrim in May. Katie Kalisher via Storyful Rodriguez, 31, is charged with shooting Yaron Lichinsky, 28, and Sarah Pilgrim, 26, late on May 21 as they were leaving a Young Diplomats Reception held at the Capital Jewish Museum in DC. The victims, who were a couple, both worked at the Israeli Embassy. Chicago native Rodriguez is now charged with two counts of first-degree murder and is being held in jail as prosecutors determine a full list of charges against him. Depraved Rodriguez, who had ties to radical left-wing groups, reportedly claimed responsibility for the attack that night while chanting 'Free Palestine' which has since made him the subject of praise online. A video of Rodriguez's arrest posted to Resistance News Network, a pro-Palestinian Telegram channel with more than 165,000 followers, received tremendous positive attention. 404 users reacted with a heart-on-fire emoji, and 192 more with a salute emoji. 8 A message posted to the Tariq el-Tahrir Youth and Student Network Telegram channel encouraged members to post stickers of Rodriguez 'everywhere.' Telegram Individuals on the Tariq el-Tahrir Youth and Student Network Telegram channel were encouraged to print out stickers of Rodriguez and to 'distribute them everywhere! Long live the armed anti-imperialist resistance!' Especially disturbing strings of comments about Rodriguez and racist hate directed towards Lichinsky and Pilgrim were left by members of GAZA NOW IN ENGLISH, a Telegram channel with more than 200,000 members. An image of Rodriguez posted to the channel the day after the attack praised him for, 'in a moment of courage, [deciding] to make his voice heard and [confronting] the murderers with boldness,' despite both of his victims being entirely innocent diplomats. 8 Stickers of Elias Rodriguez were circulated on Telegram groups to be downloaded by users. 8 Reactions on Telegram to Lichinsky and Pilgrim's murder were viciously antisemitic. Telegram 'Great man even though he's a Christian/atheist worm,' one channel member responded. Another wrote, 'Blessed… two zionists off to their promised land in HELL!!!' 'Go go go rodriguesz [sic], another shooter are welcomed,' a third user wrote. Another said, 'This should happen all over the world in each and every country.' Responses to a photo of the two victims were equally depraved. Heart emojis, Palestinian flags, poop emojis, and inverted red triangles, used by Hamas in military footage to indicate an Israeli target before an attack, littered the comment section. 'Welcome to hell,' someone emboldened by their anonymity wrote. Another chimed in, 'Those things are not 'people' they are demons.' 'Thank you… let all iarelist [sic] and zionist be killed,' a commenter added. 'Killing jews ia [sic] service to humanity. Kill more of these terrorist children killers,' someone wrote. 8 Many users on the GAZA NOW IN ENGLISH Telegram channel celebrated the murders. Telegram Multiple Telegram channels, including the United Liberation Front for Palestine and Resistance News Network, circulated a petition to free Rodriguez, written by the anonymous Free Elias Rodriguez Organizing Committee. 'Elias Rodriguez's targeted attack on two israeli [sic] diplomatic staff on May 21, 2025 was a legitimate act of resistance against the zionist state,' it reads, condoning murder on US territory for political ends. 8 Rodriguez's image was photoshopped onto a Palestinian flag, superimposed with a hammer and sickle. Telegram They compare Rodriguez to alleged United Healthcare CEO killer Luigi Mangione, 'whose alleged actions,' the petition argues, 'also helped to balance the scales of justice.' 'We are saying that such counter-violence is legitimate. It is justice. Elias Rodriguez's act was fully justified, at that place where legal and moral duties meet.' 8 Several Telegram groups circulated a petition to free Elias Rodriguez from prison. Telegram Jewish groups have warned that many channels like these are actually seeded and fuelled by Hamas to spread its anti-Israel propaganda. 'The Telegram app has a channel where anyone can find English translations of propaganda from groups like Hamas. It's not necessarily like there's a menu of options from Hamas, it's not that official. They just create online spaces where people can access and circulate their propaganda. 'It serves Hamas by portraying them as a legitimate resistance instead of the bloodthirsty terrorists that they are. It has dangerous consequences and makes people feel like they are not alone in their resistance, which can make them more damaging,' Oren Segal, the Anti-Defamation League's SVP for Counter-Extremism and Intelligence, recently told The Post. 8 A 'zine' version of Khaled Barakat's op-ed was circulated for download on several channels. Telegram Telegram groups, including Resistance News Network, the Tariq el-Tahrir Youth and Student Network, and United Liberation Front for Palestine, which were identified to The Post by the Foundation for Defense of Democracies as especially extreme channels, have also shared an especially inflammatory op-ed celebrating Rodriguez. The piece is written by Khaled Barakat, an individual identified by the US Department of Treasury as a Specially Designated National for his association with the designated terrorist organization Popular Front for the Liberation of Palestine. Published originally in Arabic in a Lebanese newspaper, the piece has been converted into a 'zine' form that Telegram users are circulating in a printable PDF form. Barakat's message reads: 'Rodriguez's operation represents a cry in the face of the American system, and a message that resistance is … an identity, and an ethical and political stance that allows for no compromise.'
Yahoo
26 minutes ago
- Yahoo
Russia's State Duma passes bill to create state messaging app as it considers blocking WhatsApp
The State Duma, the lower chamber of Russia's parliament, passed a bill on June 10 to create a new messaging app, the so-called "national messenger," the Duma's press service reported, as the Kremlin tries to reduce its dependency on WhatsApp and Telegram The new app "combines the features of a messenger and the functions of government services," a statement read. The news comes as Russia tries to reduce citizens' access to foreign messengers and other online services in favor of domestic applications. The new online platform is needed to increase "the availability of governmental services" and "strengthen the protection of information exchanged among users," according to the bill. The new application will be integrated into Russian state and municipal databases, and private information can be transferred with the user's consent, particularly for "identification, signing contracts, paying for services or goods." Documents submitted through the "national messenger" will be equated to paper originals. The system will also allow users to certify documents with their electronic signatures. The Russian messenger will include all "educational services and chats that educational institutions of all levels currently use." The Russian government will choose a company to develop the application. In March 2022, the Russian government blocked Facebook and Instagram. Two years later, Russia's communications regulator, Roskomnadzor, announced the blocking of Viber and Signal apps. The Russian government is also considering blocking WhatsApp, an app owned by Meta, a company labeled as an "extremist organization" in Russia. In July 2024, Russia's communications regulator, Roskomnadzor, began throttling YouTube speeds, initially blaming technical issues caused by wear and tear on Google's servers. Google dismissed the claim, while Russian lawmaker Alexander Khinshtein later confirmed the slowdowns were intentional. Read also: In African universities, Russia's war against Ukraine finds new supporters We've been working hard to bring you independent, locally-sourced news from Ukraine. Consider supporting the Kyiv Independent.
Yahoo
26 minutes ago
- Yahoo
Russia hits ‘shipbuilding sites' in Kyiv
Russia hit military sites in Kyiv overnight including 'aviation, missile, armoured vehicle and ship-building facilities', its defence ministry claimed. Kremlin officials said attacks on the Ukrainian capital struck command centres, troop deployment sites, weapon and equipment storage hubs, military airfield infrastructure, ammunition warehouses and fuel depots. 'All designated targets have been hit,' the defence ministry added. Kremlin-affiliated state media reported that attacks had also struck the Artem plant in Kyiv, a missile production facility. Challenging Russia's claim, Timur Tkachenko, head of Kyiv's military administration, wrote on Telegram: 'Once again, Russian strikes are not hitting military targets, but the lives of ordinary people.' Kyiv is home to only one major shipyard, the Kuznia na Rybalskomu facility, which produces vessels for the Ukrainian navy. Ukraine has not yet confirmed if it was hit during the Russian attacks. An air alert for civilians remained active in the capital for five hours overnight as seven of the city's 10 districts fielded aggressive attacks which left residential buildings and a business centre smouldering. Ukrainian officials said that one person was killed and four more injured in Kyiv, as Volodymyr Zelensky claimed that 'concrete action' was needed to prevent future attacks. In the southern port city of Odesa, attacks on residential buildings and a maternity hospital left two people dead and nine wounded, according to Oleh Kiper, head of the regional military administration. Thanks for following our live coverage of the war in Ukraine. It has now ended for the day. Here's a reminder of what happened today: Volodymyr Zelensky called on the United States and Europe to respond to a fresh bout of Russian attacks The Telegraph's Senior Foreign Correspondent Memphis Barker described the intense sounds and smells of Russia's overnight bombardment on Kyiv Ukraine's military intelligence chief claimed that Russia has agreed to help North Korea begin production of Shahed-style 'kamikaze' drones Ukraine said it had exchanged captured soldiers with Russia, the second stage of an agreement struck at peace talks last week We will be back with more updates and analysis soon. The European Commission has proposed an 18th package of sanctions against Russia targeting its energy exports, financial institutions and military industry, with the aim of forcing Moscow to stop dragging its feet in negotiations. The measures include proposals to lower the G7 price cap on Russian oil from $60 to $45 per barrel and tighten measures against the country's 'shadow fleet.' Speaking at a joint press conference with Kaja Kallas on Tuesday, Ursula von der Leyen, the European Commission president, called the sanctions 'robust' and 'hard-biting', adding 'our message is clear: This war must end.' In May, European leaders threatened Moscow with 'massive' sanctions if it refused to agree to a ceasefire in Ukraine. The US plans to cut funding for a programme building new weapons for Ukraine, Pete Hegseth has said. Mr Hegseth, the US defence secretary, suggested the move was an attempt to achieve a 'negotiated peaceful settlement' in the war, but did not specify how far the Ukraine Security Assistance Initiative (Usai) would be cut. Under the programme, the Pentagon issues contracts to US defence firms to build equipment for Kyiv. 'We believe a negotiated peaceful settlement is in the best interests of both parties and our nation's interest, especially with all the competing interests around the globe,' Mr Hegseth told a congressional committee on Tuesday. 'I don't think the word victory has been well defined or the path to it. And as a result the path to peace that stops the killing and the carnage is something that president Trump is very invested in.' Ukraine said it had exchanged captured soldiers with Russia, the second stage of an agreement struck at peace talks last week for each side to free more than 1,000 prisoners. 'We continue the return of our people, as agreed in Istanbul,' Volodymyr Zelensky wrote on X, confirming the exchange without immediately disclosing the exact number of returnees. 'Today marks the first stage of the return of our injured and severely wounded warriors from Russian captivity. All of them require immediate medical attention. This is an important humanitarian act,' the Ukrainian president added. Lev Shlosberg, a senior member of the Russian opposition party Yabloko, was arrested and charged with allegedly 'discrediting' Russia's armed forces on Tuesday after he made several remarks condemning the war in Ukraine, Reuters reports. In January, Mr Shlosberg described the war as a game of 'bloody chess' and said 'we must first stop killing people.' Members of the Yabloko party said that Mr Shlosberg's arrest was linked to these remarks, and that he faces up to five years in prison if convicted. Mr Shlosberg was labelled a 'foreign agent' by Russia's Justice Ministry in 2023 and faces separate criminal charges for refusing to comply with this label. Kyiv's St. Sophia Cathedral was damaged overnight in one of the largest Russian air attacks on the capital since the full-scale war began. Officials said that a blast wave destroyed a cornice on the main apse of the cathedral, one of Kyiv's most iconic buildings which dates back to the early 11th century and is a UNESCO World Heritage site. Mykola Tochytskyi, Ukraine's Minister of Culture and Strategic Communications, wrote on Facebook: 'Last night, the enemy struck at the very heart of our identity again.' 'St. Sophia Cathedral in Kyiv, a shrine that has survived centuries and symbolises the birth of our statehood, has been damaged,' Mr Tochytskyi continued. Russia launched one of its biggest air attacks on Kyiv overnight, officials said, using more than 300 drones and seven missiles in strikes that also hit other parts of the country. One person was killed and several more injured in the five hour-long attack on the capital that hit seven of the city's 10 districts, according to Vitali Klitschko, Kyiv's mayor. A Telegraph journalist was holed up in an air raid shelter and heard the buzzing of drones, followed by gunfire and loud explosions throughout the night. In the southern port city of Odesa, a maternity hospital and residential buildings were also hit, killing two people and injuring nine, local authorities said. Condemning the attacks, Andriy Yermak, Volodymyr Zelensky's chief of staff, said: 'You can't break Ukrainians with terror.' It came a day after Moscow launched its biggest overnight drone bombardment of the three-year war, considered part of a retaliatory response to Ukraine's extraordinary June 1 drone attack on Russia's remote bomber bases. 'It is vital that the response to this and other similar Russian attacks is not silence from the world, but concrete action,' Mr Zelensky said this morning, adding that two of the missiles were North Korean-made. In the aftermath of Ukraine's audacious 'Operation Spider's Web', which claimed as many as 41 of Russia's military jets in drone attacks on four airbases across the country last Sunday, Vladimir Putin vowed revenge, writes Lisa Haseldine. Relaying his conversation with the Russian president in the attack's aftermath, Donald Trump said – without the slightest hint of alarm or condemnation – 'president Putin did say, and very strongly, that he will have to respond to the recent attack on the airfields'. Now, it appears that response has arrived. Overnight, Moscow launched its 'biggest overnight bombardment' of the war so far, according to Ukraine's air force, directing 479 drones and 20 missiles predominantly at the western and central parts of the country. The attack reached as far west as Rivne, unnerving Poland – Ukraine's neighbour – to such a degree that it felt compelled to scramble its air force to patrol for stray missiles. One woman was killed in Russia's huge combined overnight attack on the Ukrainian capital, announced Timur Tkachenko, head of Kyiv's military administration.'Once again, Russian strikes are not hitting military targets, but the lives of ordinary people. This once more shows the true essence of what we are dealing with,' Mr Tkachenko wrote on contradicts Russia's account of the attacks, which its defence ministry had claimed targeted military facilities. The Kremlin has said that it is still in talks with Kyiv over an exchange of soldiers killed in the war. Dmitry Peskov, the Kremlin spokesman, said that refrigerated trailers containing the bodies of Ukrainian soldiers had been waiting at the border for 'several days', in a statement to Russian media on Tuesday. Mr Peskov claimed that Ukraine has not yet provided bodies for the exchange. Moscow previously said that 1,000 bodies were to be handed over from its side. The exchange was agreed in Istanbul on June 2. It comes after both sides exchanged seriously wounded soldiers and those under the age of 25 on Monday. Viktor Orban, the Hungarian prime minister, said that Russia is 'too weak' to attack Nato countries, adding 'they're not even capable of defeating Ukraine.' Mr Orban, who is regarded as Vladimir Putin's closest EU ally, also told French TV channel LCI, that the leaders of the Russian Federation 'only understand the language of force, so Europe must also take steps to make itself strong.' Earlier this month, Mr Orban said he would do everything possible to prevent Ukraine from joining the European Union, claiming that Ukraine will 'drain every euro, forint, and zloty that we have invested in supporting European families, farmers, and industry.' Russian forces carried out strikes on military targets in the Ukrainian capital Kyiv with high-precision weapons and drones overnight, its defence ministry said. The air strikes on Kyiv, among the largest in over three years of war, were part of intensified bombardments that Moscow says are retaliation for attacks by Ukrainian forces on Russia. Ukraine says the hours-long strikes hit civilian targets across the capital and at least four people were treated in hospital. Russia has agreed to help North Korea begin production of Shahed-style 'kamikaze' drones, according to Ukraine's military intelligence chief. Long-range kamikaze drones manufactured in North Korea could be used to help Russia strike Ukraine and potentially be used to strike South Korean targets, said Kyrylo Budanov in an interview with The War Korea has supplied soldiers, artillery, drones and ballistic missiles to Russia since the beginning of the full-scale invasion of Ukraine in February 2022. I could smell burning from my room and social media footage taken from rooftops showed clouds of smoke across the city. By 4.15am local time the attacks appeared to die down, after more than two hours of fairly constant assault. Whether there was further damage will become clearer in the coming hours. But already, by 9am, the city was back into its stride: the roads busy with people heading to work. Ukrainian overnight drone strikes forced a temporary suspension of flights in all airports serving Moscow and the country's second-largest city St Petersburg. Russia destroyed a total of 102 Ukrainian drones overnight, its defence ministry - which reports only how many were downed, not the number Ukraine launched - said, reporting no damage. Russia's civil aviation authority Rosaviatsia temporarily halted flights at all four major airports serving Moscow and St. Petersburg's Pulkovo Airport, as well as at airports in nine other cities to ensure safety. Flights in Moscow and some other cities were restored by Tuesday morning, but restrictions were still in place in St. Petersburg at 5.30am BST. From my hotel room in Kyiv, you could hear the sounds of a massive drone strike for much of the night. First, the sour whine of a Shahed. Then the rattle of gunfire by Ukrainian air defences. Finally, all too often, a pounding explosion. For days the capital had braced for Putin's threatened 'revenge' for Operation Spider's Web. It appeared to arrive at around 2am, as the first of a steady flow of missiles swarmed over the city. Volodymyr Zelensky, Ukraine's president, had warned residents to take air raid warnings more seriously. There was little need to repeat the message, amid the staccato bursts of gunfire and percussive detonations. The hotel's air raid shelter filled up: those who had taken their chances the night before, when almost 500 drones were fired at Ukraine, lay on bean-bags or brought down pillows from their rooms. Even for Kyiv residents accustomed to Putin's nightly deliveries, it was a loud, sleepless night. Volodymyr Zelensky today called on the United States and Europe to respond to a fresh bout of Russian attacks of more than 300 drones and seven missiles. 'It is vital that the response to this and other similar Russian attacks is not silence from the world, but concrete action. Action from America, which has the power to force Russia into peace. Action from Europe, which has no alternative but to be strong,' the Ukrainian leader wrote in a post on social media, adding that two of the missiles were North Korean-made. We're bringing you all the latest from the war in Ukraine. Broaden your horizons with award-winning British journalism. Try The Telegraph free for 1 month with unlimited access to our award-winning website, exclusive app, money-saving offers and more.
