Fake Job Interviews Used to Distribute Infostealer Malware Targeting Web3 Professionals

A cyber campaign has emerged targeting Web3 professionals with fake job interviews to deliver cross-platform infostealer malware. Attackers impersonate recruiters and direct victims to a malicious domain, relay.lc, where they are prompted to install a tool named 'Relay.' This malware is designed to harvest sensitive information, including crypto wallets and passwords. The attack is particularly aimed at Web3 developers who are actively seeking employment. The sophistication of the social engineering tactics used in this campaign raises concerns about the security of remote hiring processes. No specific numbers of affected individuals or organizations have been reported yet. The current status of the attack is ongoing, with warnings issued to potential victims.

Key Points: • Attackers impersonate recruiters to target Web3 professionals. • Malware delivered via a fake meeting tool called 'Relay.' • Campaign exploits the growing trend of remote job interviews.