Singapore Cryptocurrency Fake Recruitment Scam Causes $11.8 Million Loss
Singapore police and the Cyber Security Agency reported that a cryptocurrency scam involving fake recruitment and software intrusion has resulted in a loss of $11.8 million.
Scammers impersonated recruitment personnel from cryptocurrency companies on LinkedIn, communicated via emails from spoofed domains, and arranged video interviews while keeping their cameras off.
Victims were directed to a counterfeit website to complete technical programming tests, leading to the download of malware on company devices, resulting in the theft of session tokens.
Hackers used the tokens to bypass multi-factor authentication, accessed accounts linked to the company's code repository, and obtained credentials to bypass transaction limits and approvals, completing cryptocurrency transfers.
The police advised technology and cryptocurrency industry businesses and individuals to enhance precautions, avoiding downloading software or sharing sensitive credentials in unknown environments.
This scam combines social engineering and malware, targeting corporate systems to transfer assets after intrusion.
At the market level, such supply chain attacks increase corporate security investments, directing funds towards identity verification and session protection tools, benefiting cybersecurity and anti-fraud service providers, while putting pressure on cryptocurrency and technology companies that rely on remote recruitment.
Source: Public Information
ABAB AI Insight
Singapore has previously issued warnings about cryptocurrency and job scams. This incident, combining malicious coding tests and session token theft, marks an upgrade from traditional investment scams to targeted attacks on corporate development environments.
In terms of capital flow, the scam group obtains high-value corporate access through low-cost social engineering, with funds quickly transferred via cryptocurrency channels. Law enforcement relies on blockchain analysis and cooperation with exchanges for tracking.
Similar cases of supply chain attacks and fake recruitment phishing targeting developers are evident globally, currently exacerbated by the rise of remote work.
Essentially, this represents an expansion of attack surfaces under technological substitution: session tokens have become a new attack vector, and companies need to shift from password protection to continuous identity verification.
ABAB News · Cognitive Laws
Fake recruitment is a low-cost entry point into corporate systems.
Session tokens are easier to weaponize than passwords.
Coding tests have become a new channel for malware deployment.