The current instability in the IT sector, characterized by layoffs and a reduced number of vacancies, has led to a rise in fraudulent job offers. Attackers exploit candidates' anxiety to steal private keys and financial assets, including cryptocurrency and tokens.
Common tactics include requesting that candidates download and run projects from private repositories, install malicious browser extensions for video calls, or share screens during interviews. Attackers often use AI-generated deepfakes to impersonate recruiters during video meetings.
Fraudulent schemes often involve superficial interviews where recruiters avoid detailed technical questions. Experts recommend verifying LinkedIn profiles, checking for official company websites, and scrutinizing GitHub repositories for suspicious dependencies, obfuscated code, or unauthorized network requests.
Security measures should include static analysis of code using AI assistants before execution. If running code is necessary, it must be done in an isolated environment without access to personal keys or sensitive files. Compromised systems require immediate password changes and token revocation.
