Axie Infinity

Read

A blockchain developer fell victim to a crypto scam after responding to a seemingly legitimate Upwork job. 
Bad actors have turned to <a href="https://crypto.news/tag/upwork/" target="_blank" rel="noreferrer noopener">Upwork</a> in an effort to lure <a href="https://crypto.news/tag/blockchain/" target="_blank" rel="noreferrer noopener">blockchain</a> developers into downloading malicious software, enabling them to drain cryptocurrencies from non-custodial wallets. As per a BleepingComputer <a href="https://www.bleepingcomputer.com/news/security/blockchain-devs-wallet-emptied-in-job-interview-using-npm-package/" target="_blank" rel="noreferrer noopener">report</a>, scam recruiters are instructing victims via <a href="https://crypto.news/tag/linkedin/" target="_blank" rel="noreferrer noopener">LinkedIn</a> to download and debug code from two malicious npm packages, hosted on a GitHub repository. 
<figure class="wp-block-image size-large">
 <img loading="lazy" decoding="async" width="1024" height="569" src="https://crypto.news/app/uploads/2023/12/hdsiufhsidufh-1024x569.png" alt="Scam recruiters target blockchain devs on Upwork, steal crypto with npm packages - 4" class="wp-image-14232544">
 <figcaption class="wp-element-caption">
 One of the malicious npm packages on GitHub | Source: BleepingComputer
 </figcaption>
</figure> 
 You might also like: <a href="https://crypto.news/minnesota-man-loses-9m-in-linkedin-crypto-romance-scam/"> Minnesota man loses $9m in LinkedIn crypto romance scam </a> 
Once developers execute the packages, a malicious script gains access to their devices. In an interview with BleepingComputer, Antalya-based blockchain developer Murat Çeliktepe revealed losing over $500 from his <a href="https://crypto.news/tag/metamask/" target="_blank" rel="noreferrer noopener">MetaMask</a> wallet in crypto after opening the npm packages, providing scammers with remote access to his device. 
The incident extends beyond Çeliktepe, as the report notes other developers reporting similar encounters with the same recruiters on LinkedIn, highlighting the prevalence of scams targeting blockchain developers. 
Scammers seem to continue targeting blockchain developers through job platforms like LinkedIn and Upwork, showcasing a persistent strategy. In an incident in 2022, North Korea-affiliated hackers <a href="https://crypto.news/sky-mavis-responsibility-axie-infitinity-625-million-ronin-hack/" target="_blank" rel="noreferrer noopener">managed</a> to pilfer $600 million from the Axie Infinity blockchain game by sending a fake job offer in a malicious PDF file via LinkedIn to an engineer from Sky Mavis, a company behind the web3 game. 
 Read more: <a href="https://crypto.news/x-users-at-risk-as-crypto-scammers-exploit-new-design-flaw/"> X users at risk as crypto scammers exploit new design flaw </a>

Scam recruiters target blockchain devs on Upwork, steal crypto with npm packages

crypto.news

Other articles published on Dec 29, 2023

4 Coins To Pump in Early January

Happy New Year! 🎉 Embrace 2024 with us, celebrating success and the final hours of our ICO 🚀#GCWi...

Investors Are Pouring All Their Funds Into These 2 Tokens Before 2023 Ends

Can the Bitcoin Price Correction Deepen to $40,000? Current Predictions!

VanEck has updated its application for a spot Bitcoin ETF.

SEC Looks to Enhance Control by Trimming Intermediaries in Spot Bitcoin ETFs: Bloomberg Analyst

Join our free newsletter for daily crypto updates!