A new type of recruitment scam targeting Web3 practitioners has been discovered, with malware disguised as an AI interview tool

SlowMist announced that a new recruitment scam targeting Web3 practitioners has recently been discovered. Attackers impersonate recruiters, luring victims to install an AI meeting software called "Relay," which is actually an information-stealing malware.

This malware targets both macOS and Windows users and can steal sensitive information such as browser credentials, cryptocurrency wallet-related data, Keychain data, Telegram sessions, and more. SlowMist has completed sample analysis and disclosed how this attack chain operates. SlowMist reminds that when participating in online interviews or recruitment processes, one should be cautious about installing unfamiliar software, avoid running unverified applications, and pay attention to unusual installation requests or system password prompts.