vinoleesky

#

Crypto Malware Disguised as Job Listings Is Preying on Job Seekers. Job seekers are being targeted by a sinister scheme, with fake listings installing hidden cryptocurrency mining malware that silently hijacks systems and drains resources.

Cybersecurity firm Crowdstrike has revealed details of a phishing scheme in a blog post published Tuesday, outlining how attackers manipulate the firm’s hiring procedures to distribute cryptocurrency mining malware.

The attackers deploy fraudulent recruitment emails and a deceptive website to lure victims. These unsuspecting individuals are instructed to download a bogus “employee CRM application,” which instead installs the XMRig cryptominer, a tool that surreptitiously uses the infected system to mine Monero cryptocurrency. The company explained:

A newly discovered phishing campaign uses Crowdstrike recruitment branding to convince victims to download a fake application, which serves as a downloader for the XMRig cryptominer.

This scheme initiates with emails falsely claiming to originate from Crowdstrike’s recruitment department. These messages direct recipients to a phony website mimicking a legitimate employment platform. The website offers downloads compatible with Windows and macOS, but regardless of the selection, a Windows-specific malware executable is delivered.

Upon execution, the malware undergoes multiple verification steps to evade detection by security mechanisms. If these checks succeed, the malware fetches and deploys XMRig, utilizing the system’s processing power to mine cryptocurrency for the attackers. Designed to operate stealthily, the cryptominer limits its resource usage to avoid raising suspicion while gradually impairing the system’s performance over time.

Crowdstrike further discussed the malware’s mechanisms for persistence. The software installs itself within critical system directories and deploys scripts ensuring it reactivates each time the system restarts.

To combat such tactics, the company has urged job seekers to validate all recruitment communications through official channels. It also clarified.#jobs