TechFlow news, July 28, according to SlowMist Yu Xian, a hacker group disguised as recruiters on the V2EX platform, posting fake job information to attract interviewees with enticing benefits. The group lured interviewees into developing pages based on their pre-prepared malicious code repository as a project template.
Once interviewees download and debug the related code, their computers will be implanted with malware, potentially leading to the theft of cryptocurrency assets and various account permissions. This attack method exploits job seekers' trust in technical interviews, carrying out cyberattacks through seemingly normal development tasks.
Job seekers should remain vigilant during technical interviews, avoid running code from unknown sources on personal devices, and are advised to use virtual machines or sandbox environments for testing.
