SlowMist said on July 29 that it has identified a newly discovered recruitment scam aimed at people working in Web3. In the campaign, attackers pose as recruiters and persuade targets to install an AI meeting application called "Relay," which is actually an information-stealing malware program. According to SlowMist, the malware is designed to target both macOS and Windows users and can steal browser credentials, crypto wallet-related data, Keychain data, and Telegram session information. The security firm said it has completed sample analysis and disclosed how the attack chain operates. SlowMist also warned users to be careful when joining online interviews or recruitment processes, avoid running unverified applications, and pay attention to unusual installation requests or system password prompts.
BlockBeats reported on July 29 that SlowMist had disclosed a newly identified recruitment scam targeting Web3 professionals.
According to SlowMist, the attackers pose as recruiters and trick victims into installing an AI meeting app called "Relay," which is in fact an information-stealing malware program.
SlowMist said the malware targets both macOS and Windows users. It can steal browser credentials, crypto wallet-related data, Keychain data, and Telegram sessions.
The firm said it has completed sample analysis and revealed how the attack chain works.
SlowMist advised users to stay cautious when taking part in online interviews or hiring processes, avoid running unverified applications, and watch for unusual installation requests or system password prompts.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
