Hacking group Crazy Evil created a fake company called "ChainSeeker.io" to deceive job seekers in the crypto industry. They set up LinkedIn and X profiles advertising crypto industry jobs and utilized premium advertisements on LinkedIn, WellFound, and CryptoJobsList. Applicants would be contacted by the fake company's "chief human resources officer" and directed to the "chief marketing officer" on Telegram. The CMO would then persuade them to download GrassCall, a virtual meeting software which, unbeknownst to them, contained information-stealing malware. The malware would search for crypto wallets, passwords, Apple Keychain data, and authentication cookies in web browsers. The campaign is no longer active, and affected individuals have formed a support group on Telegram. Crazy Evil has previously conducted social engineering attacks on the crypto industry, with its lifetime revenue estimated at over $5 million. Other targeted scams in the crypto industry have involved the use of fake Zoom links or email updates on DeFi trends and bitcoin prices to install malware.



Other News from Today