Fake Web3 Job Interview Software Delivers Infostealer to Steal Crypto Wallets and Passwords

Gbhackers •Mayura Kathir • July 29, 2026

A newly uncovered cyber campaign is targeting Web3 professionals with sophisticated social engineering, leveraging fake job interviews to deploy cross-platform infostealer malware designed to harvest crypto wallets, credentials, and sensitive system data. The attack begins with threat actors impersonating recruiters who approach job seekers with interview opportunities. Victims are directed to a malicious domain, relay.lc, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake Job Interviews Used to Distribute Infostealer Malware Targeting Web3 Professionals A cyber campaign has emerged targeting Web3 professionals with fake job interviews to deliver cross-platform infostealer malware. Attackers impersonate recruiters and direct victims to a malicious domain, relay.lc, where they are prompted to install a tool named 'Relay.' This malware is designed to harvest sensitive information, including crypto wallets and passwords. The attack is particularly aimed at Web3 developers who are actively seeking employment. The sophistication of the social engineering tactics used in this campaign raises concerns about the security of remote hiring processes. No specific numbers of affected individuals or organizations have been reported yet. The current status of the attack is ongoing, with warnings issued to potential victims. 2 sources 65

Extracted Entities

Fake Web3 Job Interview Software Delivers Infostealer to Steal Crypto Wallets and Passwords

The full story

Extracted Entities

Attack Types (1)

Domains (1)

MITRE ATT&CK (1)