Axie Infinity

Read

<div class="cryptonews">
 <p class="is-style-lead">A blockchain developer fell victim to a crypto scam after responding to a seemingly legitimate Upwork job.</p>
 <p>Bad actors have turned to Upwork in an effort to lure <a rel="noopener noreferrer nofollow" title="blockchain" href="https://thebittimes.com/tag/blockchain.html">blockchain</a> developers into downloading malicious software, enabling them to drain <a rel="noopener noreferrer nofollow" title="crypto" href="https://thebittimes.com/tag/crypto.html">crypto</a>currencies from non-custodial wallets. As per a BleepingComputer report, scam <a rel="noopener noreferrer nofollow" title="recruiters" href="https://thebittimes.com/tag/recruiters.html">recruiters</a> are instructing victims via LinkedIn to download and debug code from two malicious npm <a rel="noopener noreferrer nofollow" title="packages" href="https://thebittimes.com/tag/packages.html">packages</a>, hosted on a GitHub repository.</p>
 <figure class="wp-block-image size-large"><picture decoding="async" class="wp-image-14232544">
   <source type="image/webp" srcset="https://cdn.thebittimes.com/images/2023/12/29/5fca607986a093e6e864ee45ce3df5ac.webp.webp">
   <img decoding="async" width="1024" height="569" src="https://cdn.thebittimes.com/images/2023/12/29/5fca607986a093e6e864ee45ce3df5ac.webp" alt="Scam recruiters target blockchain devs on Upwork, steal crypto with npm packages - 1"> 
  </picture>
  <figcaption class="wp-element-caption">
   One of the malicious npm packages on GitHub | Source: BleepingComputer
  </figcaption>
 </figure>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Minnesota man loses $9m in LinkedIn crypto romance scam
 </div>
 <p>Once developers execute the packages, a malicious script gains access to their devices. In an interview with BleepingComputer, Antalya-based blockchain developer Murat Çeliktepe revealed losing over $500 from his MetaMask wallet in crypto after opening the npm packages, providing scammers with remote access to his device.</p>
 <p>The incident extends beyond Çeliktepe, as the report notes other developers reporting similar encounters with the same <a rel="noopener noreferrer nofollow" title="recruiters" href="https://thebittimes.com/tag/recruiters.html">recruiters</a> on LinkedIn, highlighting the prevalence of scams targeting <a rel="noopener noreferrer nofollow" title="blockchain" href="https://thebittimes.com/tag/blockchain.html">blockchain</a> developers.</p>
 <p>Scammers seem to continue targeting blockchain developers through job platforms like LinkedIn and Upwork, showcasing a persistent strategy. In an incident in 2022, North Korea-affiliated hackers managed to pilfer $600 million from the Axie Infinity blockchain game by sending a fake job offer in a malicious PDF file via LinkedIn to an engineer from Sky Mavis, a company behind the web3 game.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> X users at risk as crypto scammers exploit new design flaw
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/scam-recruiters-target-blockchain-devs-on-upwork-steal-crypto-with-npm-packages-tbt75077.html">https://thebittimes.com/scam-recruiters-target-blockchain-devs-on-upwork-steal-crypto-with-npm-packages-tbt75077.html</a></p>

Scam recruiters target blockchain devs on Upwork, steal crypto with npm packages

TheBitTimes

Other articles published on Dec 29, 2023

Levana Protocol Faces $1.1 Million Attack on Osmosis Blockchain

Avalanche Foundation to spend Culture Catalyst’s funds on select meme coins

Zcash and Monero on the chopping block for delisting

EU Official Hits Back at Macron’s Resistance to AI Act

Changpeng “CZ” Zhao Appeals to Seal Documents for Child’s Privacy

Solana Meme Coin Bonk (BONK) Rockets up With Jaw-Dropping 13,000% Yearly Surge

Join our free newsletter for daily crypto updates!