Cybercriminals have developed a fresh fraud targeting bitcoin industry job hopefuls. Scammers are distributing malware meant to steal private information and empty crypto wallets using false job postings and a phonyeeting tool known as “GraceCall.”
Allegedly run by a cybercrime outfit based in Russia, this program creates fictitious businesses that appear to be real. One such company, “Chain Seeker,” advertised job openings on LinkedIn and several Web3 job forums, such as WellFound and CryptoJobsList. With some advertisements showing incomes of up to $150,000 annually, the bogus organization purported to provide highly paying jobs.
Candidates showing interest in these positions were emailed and advised to interact on Telegram with a “marketing chief.” Downloading the GrassCall app—which was promoted as a videoconference tool but was really loaded with malware—was the next step. Once set up, the program looked for crypto wallets and pilfered money from already-stashed sources.
With a website, social media presence, and a staff of allegedly hired personnel advertised online, victims claimed Chain Seeker seemed very real. One candidate for a job, Cristian Ghita, posted his LinkedIn experience, saying, “This fraud was well-organized. They maintained a website, polished profiles, and even a respectable-looking video conference feature.” Many who fell for the fraud sadly lost their bitcoin.
Security experts caution that this fraud fits a bigger pattern of hacks aiming at the cryptocurrency sector. Reportedly connected to more than 10 such frauds, all with an eye toward social engineering methods for digital asset theft, are the hackers behind this plot.
SeIf you think the GrassCall fraud has targeted you, please investigate right away.hange passwordsChange your passwords on a secure device, transfer your funds to a secure wallet, and promptly report the incident to the cybersecurity authorities.ur assets in the digital age depends on being aware and careful since scams are becoming more sophisticated.
