Crypto Scammers on the Loose!

🚨 Crypto Scammers on the Loose! 🚨

Oh joy, oh rapture! It seems that social engineering scammers have found a new way to part you from your hard-earned crypto. And, surprise, surprise, it involves fake job offers and a malware-laden app called “GrassCall”. Because, you know, who doesn’t love a good game of “download this sketchy app and watch your wallet disappear”? 🤑

According to BleepingComputer, the scammers behind this little scheme have already abandoned ship, taking down their websites and LinkedIn accounts as their victims began to speak out. But not before they managed to relieve hundreds of people of their crypto. Nice work, scammers! 👏

The Russia-based cybercrime group “Crazy Evil” (because, of course, they’d choose a name like that) is reportedly behind the scam. They’ve got a whole team of social engineering specialists, aka “traffers”, who are just dying to get their hands on your crypto. 💸

Recorded Future, a cybersecurity firm, linked “over ten active scams on social media” to Crazy Evil, which they said “explicitly victimizes the cryptocurrency space with bespoke spearphishing lures”. Yeah, because that’s exactly what you want to hear – that there are bespoke spearphishing lures out there just waiting to snag you. 🎣

It seems that Crazy Evil’s scam involved a fake crypto firm called “Chain Seeker”, which had all sorts of social media accounts and job listings on LinkedIn and other Web3 job search sites. And, of course, they had a fancy website and everything. 📊

Those who applied for the jobs were sent an email asking them to contact the marketing chief on Telegram, who would then ask them to download the malicious GrassCall app. Because, you know, who doesn’t love a good game of “download this sketchy app and watch your wallet disappear”? 🤑

Dozens of X and LinkedIn posts from job seekers recounted applying for a role at Chain Seeker only to be sent the malicious link. And, of course, they all thought it was legit because it had a website and LinkedIn profiles and employees listed. 🤦‍♂️

One LinkedIn user, Cristian Ghita, posted that “This scam was extremely well-orchestrated — they had a website, LinkedIn and X profiles, and employees listed. It looked legit from almost all angles. Even the video-conferencing tool had an almost believable online presence.” Yeah, because that’s exactly what you want to hear – that the scammers are getting better at making their scams look legit. 😬

Job ads posted by Chain Seeker had mostly been taken down by various job board sites, except for one still active on LinkedIn at the time of writing. So, if you’re looking for a job and you come across a listing from Chain Seeker, just remember – if it seems too good to be true, it probably is. 🙅‍♂️

A website for Chain Seeker lists a chief financial officer called Isabel Olmedo and an HR manager called Adriano Cattaneo, both of whose LinkedIn pages had been wiped. An account under the name of Artjoms Dzalbs was still active and noted itself as the firm’s CEO. Because, you know, who doesn’t love a good game of “find the fake CEO”? 🎉

Recorded Future warned crypto and non-fungible token (NFT) traders and gaming professionals that they’re “prime targets” for these types of scams. So, if you’re one of those people, just remember – be careful out there, folks! 🚨

Many users on X and LinkedIn advised those who believe they’re impacted by the GrassCall malware to use an uninfected device to change passwords and move their crypto to fresh wallets as a precaution. Because, you know, who doesn’t love a good game of “crypto roulette”? 🎲

2025-02-27 09:25

Read More