Fake NFT job interviews weaponize GitHub repos to drain crypto wallets
dotey · x · 2026-11-04
A dev recounts nearly losing $10k via a fake NFT project pitch on LinkedIn: an Eastern European scam crew pushes a cloud file, then asks candidates to clone a "task" repo that is actually malware stealing wallets once run. The embedded screenshots detail Binance's report on a $6B+ North Korean hack, where a fake HR did live video interviews and a code test swapped pyenv for a trojanized build that evaded antivirus.
More from Safety
- AI welfare and AI safety are allies, not rivals — a researcher's four arguments — RosieCampbell · 2026-11-04
- Meta's letter to Newsom opposes mandatory outside safety checkers, diverging from OpenAI and Anthropic — ShakeelHashim · 2026-11-04
- New book "Treacherous Tech" cites Irving's call to halt frontier AI and Pachocki's warnings — DavidSKrueger · 2026-11-04
- NBC Exit Poll: US Voters Worried About AI, Overwhelmingly Oppose Data Centers — DavidSKrueger · 2026-11-04
- Binance dev-ops infected after downloading Homebrew from malicious Google search ad — HankYeomans · 2026-11-04
- FAI Seeks Plaintiffs to Sue Vendors of Unlocked 'Abliterated' Models Over Cyber Harms — michael_nielsen · 2026-11-04