Beware! Fake Crowdstrike Recruitment Emails Spread Cryptominer Malware

CrowdStrike uncovered a recruitment-themed phishing campaign that impersonates its hiring team to trick victims into downloading a fake “employee CRM” application; the delivered Windows executable (written in Rust) functions as a downloader for the XMRig cryptominer, uses multiple environment-evasion checks (IsDebuggerPresent, process counts, CPU cores, process scanning), fetches configuration and XMRig from the web/GitHub, and establishes persistence via a startup batch script and registry changes.