In brief
- Singapore’s police force and cyber security agency put losses from a scam using fake job offers and compromised software systems at $11.8 million.
- They describe a case in which a victim was approached by a bogus recruiter for a crypto firm and steered into a coding assessment run on a company laptop.
- The malware harvested a session token, which was used to bypass multi-factor authentication and open the victim’s Bitbucket account.
Scammers posing as recruiters for cryptocurrency companies have taken $11.8 million (S$15.1 million), using fake job offers to compromise their targets’ employers, according to a joint advisory from the Singapore Police Force and the Cyber Security Agency of Singapore.
Setting out how the scam works in…
