The job market has been poor in recent years, especially in the technology industry, so many people are actively looking for work.
Scammers are taking advantage of this. They came up with a new trick to spread the word by pretending to be a recruiter. virtual currency miner on people’s devices.
It starts with an email inviting the person to schedule a job interview. However, clicking on the link installs a malicious app that secretly mines cryptocurrencies. This app hijacks your PC’s resources such as CPU and GPU, drastically slowing down its performance.
We’re giving away the latest and greatest Airpods Pro 2
A person typing on a laptop. (Kurt “Cyber Guy” Knutson)
What you need to know
This malicious campaign begins with an email that tricks victims into thinking they are part of the recruitment process. dark reading. In most cases, these emails purport to be from a recruiter from the cybersecurity company CrowdStrike.
The scam email contains a link that claims to direct the recipient to a site where they can schedule an interview. However, in reality, victims are redirected to a malicious website offering a download of what appears to be a “CRM application”.
What is artificial intelligence (AI)?
The site offers download options for both Windows and macOS. No matter which option the victim chooses, what is downloaded is a Windows executable written in Rust. This executable downloads the XMRig cryptominer.
This executable performs several environmental checks to analyze the device and avoid detection. Scan for running processes, check CPU, etc. If the device passes these checks, the executable displays a fake error message while covertly downloading additional payloads needed to run the XMRig miner.
Download fake CrowdStrike job application. (Cloud Strike)
Here’s what ruthless hackers stole from 110 million AT&T customers
How do cryptominers affect my PC?
Cryptomining apps can have a big impact on your PC’s performance. Once installed, it takes over your computer’s resources, such as the CPU and GPU, and secretly mines cryptocurrencies. This process requires a large amount of computing power and can significantly slow down the system. Your computer may become unresponsive, run warmer than usual, or consume more power.
In some cases, long-term use of cryptominers can increase stress on components and even lead to hardware damage. Additionally, these miners often run in the background without your knowledge, making it difficult to detect problems until they cause damage.
CrowdStrike is aware of this scam and advises individuals to remain vigilant. “This campaign highlights the importance of vigilance against phishing scams, especially those targeting job applicants. Individuals involved in the recruitment process should verify the authenticity of CrowdStrike communications and avoid downloading unsolicited files. There is a need.” of The company said in a blog post:.
“Organizations can reduce the risk of such attacks by educating employees about phishing tactics, monitoring suspicious network traffic, and employing endpoint protection solutions that detect and block malicious activity. Masu.”
CLICK HERE TO GET FOX BUSINESS ON THE GO
People working on laptops. (Kurt “Cyber Guy” Knutson)
Beware of encrypted PDFs as the latest method to deliver malware
5 ways to protect yourself from job interview scams
1. Check to see if you applied for the job. If you receive an unsolicited interview invitation, remember whether you actually applied for the job or company. Scammers often target job seekers at random, hoping someone will take the bait. If you haven’t applied, it may be a scam. Always check directly with the company before proceeding.
2. Verify the recruiter’s credentials. Always double-check the recruiter’s details before responding to emails or clicking on links. Verify your email address, LinkedIn profile, and company association. Legitimate companies use official email domains rather than free services like Gmail or Yahoo.
3. Avoid downloading junk files. Be wary of emails asking you to download files or applications. A formal hiring process rarely requires the installation of software. If in doubt, please contact the company directly to confirm your request.
4. Inspect links before clicking. Hover over the link in the email to see the actual URL. Scammers often use URLs that mimic legitimate sites, but there are subtle differences. If a link looks suspicious, don’t click it.
5. Use strong antivirus software. Use powerful antivirus or endpoint protection software to detect and block malicious downloads. Update your security tools regularly to ensure they can effectively deal with new threats.
The best way to protect yourself from malicious links that can install malware and access your personal information is to install antivirus software on all your devices. This protection also warns you about phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best antivirus protection products of 2025 for Windows, Mac, Android, and iOS devices.
What to do if your bank account is hacked
Cart important points
Cybercriminals always come up with new ways to exploit people. Although this particular scam is more focused on using your computer’s resources than stealing data, it is still very dangerous. This means that if hackers can easily install software on your PC, they can also steal your financial information and other personal data. Always check the emails you receive and avoid downloading anything you don’t trust.
Have you ever received a suspicious email disguised as a job ad? Please let us know by emailing us. Cyberguy.com/Contact
CLICK HERE TO GET THE FOX NEWS APP
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report newsletter using the link below. Cyberguy.com/Newsletter
Ask your cart a question or let us know your story you’d like us to feature.
Follow Kurt on his social channels.
Answers to frequently asked questions at CyberGuy:
New from cart:
Copyright 2025 CyberGuy.com. Unauthorized reproduction is prohibited.
