Web3 Developer Environments Targeted by Social Engineering Campaign Leveraging Fake Interview Software
ID: db9c3c2c-a158-5af0-9735-bd9096ae10f2
STIX ID: report--db9c3c2c-a158-5af0-9735-bd9096ae10f2
Feed Name: cybersecurityNews.com
Threat Score
Attackers create convincing fake Web3 companies and recruit via job postings and interview workflows to trick candidates into installing a malicious "collaborex_setup.msi"; the installer establishes a hidden C2 to 179.43.159.106 enabling stealthy remote control, persistent access, and exfiltration of private cryptocurrency keys and corporate data, posing significant risk to individual wallets and institutional crypto assets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.