Carding Forum
Professional
- Messages
- 2,788
- Reaction score
- 1,176
- Points
- 113
The management of the analytical company SlowMist announced scammers using fake software for video conferencing, after downloading which users lose their crypto assets.
SlowMist founder Yu Xian urged subscribers not to use unfamiliar software. He gave an example of the recent case of a maxlin.eth user who almost suffered from such fraud. maxlin.eth said that he was contacted via Telegram by a fraudster posing as an employee of the human resources department of XLabs. The attacker claimed that he had heard about the achievements of maxlin. eth in Web3, so he decided to offer the position of a marketing specialist.
The fraudster did not use common techniques that phishers usually use, such as sending a direct link to malware. Instead, the attackers arranged a fake interview via the Zoom platform, but with a different person, so that the potential victim would have the impression of genuine communication with the employer.
After almost half an hour of discussing the XLabs concept and products, the fraudster relaxed the victim's vigilance and asked the user to switch to another platform, since the "employee" who contacted the applicant via Telegram could not join the hangout via Zoom.
The user was prompted to download a meeting management software called Meetly. When the user clicked on the link, they saw a screen with the conference, but no sound. Due to technical problems, the scammers asked the user to download the software to their computer. However, even after installing the app, it continued to hang and didn't function. The scammers then terminated the session because the malicious app was already downloaded.
Maxlin. eth discovered that the link shared by the scammers was marked as a fraudulent website. Looking through the official XLabs website and LinkedIn profiles, the user did not find employees with the names of those with whom he communicated at the so-called interview. In addition, the company did not open a vacancy for a marketing specialist. Fortunately, the person was able to prevent the theft of their crypto assets — by transferring all their crypto assets to different wallets.
SlowMist founder Yu Xian urged subscribers not to use unfamiliar software. He gave an example of the recent case of a maxlin.eth user who almost suffered from such fraud. maxlin.eth said that he was contacted via Telegram by a fraudster posing as an employee of the human resources department of XLabs. The attacker claimed that he had heard about the achievements of maxlin. eth in Web3, so he decided to offer the position of a marketing specialist.
The fraudster did not use common techniques that phishers usually use, such as sending a direct link to malware. Instead, the attackers arranged a fake interview via the Zoom platform, but with a different person, so that the potential victim would have the impression of genuine communication with the employer.
After almost half an hour of discussing the XLabs concept and products, the fraudster relaxed the victim's vigilance and asked the user to switch to another platform, since the "employee" who contacted the applicant via Telegram could not join the hangout via Zoom.
The user was prompted to download a meeting management software called Meetly. When the user clicked on the link, they saw a screen with the conference, but no sound. Due to technical problems, the scammers asked the user to download the software to their computer. However, even after installing the app, it continued to hang and didn't function. The scammers then terminated the session because the malicious app was already downloaded.
Maxlin. eth discovered that the link shared by the scammers was marked as a fraudulent website. Looking through the official XLabs website and LinkedIn profiles, the user did not find employees with the names of those with whom he communicated at the so-called interview. In addition, the company did not open a vacancy for a marketing specialist. Fortunately, the person was able to prevent the theft of their crypto assets — by transferring all their crypto assets to different wallets.
