Posted 12/28/2023, 11:25:52 AM
Developer's Crypto Wallet Drained After Downloading Malicious Code for Fake Job Interview
- Blockchain developer has crypto wallet emptied after downloading npm packages for a fake "job interview" assignment
- Recruiter on LinkedIn asked developer to debug code from GitHub repos as part of application process
- After running apps locally, developer noticed $500+ worth of crypto drained from his MetaMask wallet
- Code analysis shows reverse shell port opening, suspicious network requests, and possible password stealing
- Other developers report being contacted by same fake recruiter with similar interview assignment