SlowMist Team Alerts Recruitment Scam Using Interview Software to Spread Information-Stealing Malware
SlowMist alerts that interview software is spreading information-stealing malware.
The SlowMist team warns that a recruitment scam is using interview software to spread information-stealing malware.
Threat actors disguise themselves as recruiters to induce the installation of an AI meeting tool called "Relay," targeting Web3 professionals on macOS and Windows, stealing browser credentials, wallet information, Keychain, and Telegram sessions.
Event-driven social engineering attacks are escalating, with funding and attention shifting towards on-chain security tools, putting pressure on Web3 job seekers while benefiting security audit companies.
Source: Public Information
ABAB AI Insight
SlowMist continuously monitors Web3 threats through its self-developed MistEye system and has previously disclosed multiple cases of fake recruitment and malicious GitHub repository attacks, focusing on information theft and wallet-related malware analysis.
Capital pathways show that security companies are transforming threat intelligence into public warnings and protective products, investing resources in sample reverse engineering and attack chain disassembly, with the motivation to enhance overall industry defense and consolidate professional status.
Similar to previous cases of fake interviews targeting developers, MVPs, and Redline-type information-stealing trojans, current Web3 security is in a phase of expanding from technical vulnerabilities to social engineering and supply chain attacks.
This essentially intersects regulatory changes and technological replacements, with the mechanism being that the trust in the recruitment process is weaponized, forcing users to reassess installation requests and promoting the proliferation of local protective tools.
ABAB News · Cognitive Laws
The trust process is the entry point for attacks.
One-click installation can empty wallets.
Warning speed determines the boundary of losses.