Home

Schemes

Services

Community

About Us

Scammers Using Fake LinkedIn Job Listings To Hack Devices Via Video Call Apps

Alankar Mishra

Author

Updated: 01-03-2025 at 3:32 PM

Cyber scams have advanced and are now deceiving job applicants and professionals effortlessly. Security experts have discovered a new scam in which job seekers are lured into phoney interviews on LinkedIn, where scammers use the malicious application GrassCall to hack into their devices during the call. Researchers have connected this to a Russian-speaking group of cyber criminals known as Crazy Evil, who compromise their victims’ social engineering and financial assets.

How Does The Fake Job Scam Work?

Scammers had an intricate scheme to defraud people looking for jobs in the crypto sector. There were fake companies, fake interviews, and even a sophisticated use of malware to get funds and information. The scam pattern is as follows:

1. Fake Job Postings on LinkedIn and Crypto Job Platforms

Job scams are for online services like:

Linkedin
WellFound
CryptoJobsList

Their listings are fake and seem authentic, and they are associated with a fraudulent company named ChainSeeker.io, which had:

A well-designed website
Social media accounts (X/Twitter, LinkedIn)
Fake employee profiles

The listings focused on Web3 and cryptocurrency professionals predominantly.

2. Contact Through Telegram & Phony Interviews

Once the job applicants submitted their resumes, they promptly received an email offering a video interview.
They were directed to arrange the interview through Telegram with a fake Chief Marketing Officer (CMO).
For the interview, the CMO insisted on special video call software, GrassCall.

3. GrassCall – The Malicious Video Call App

GrassCall isn’t a legitimate video app and serves as a host for malicious software.
As soon as it was downloaded, it installed terrible malware onto the target’s device.
The type of malware varies according to the operating system:
Windows users: They had RAT (Remote Access Trojan) installed along with information-collecting Rhadamanthys malware.
Mac users: They had Atomic Stealer (AMOS) malware, which aims to exfiltrate confidential information.

4. Data Theft & Financial Exploitation

Bank Accounts and Passwords
Credentials for Cryptocurrency Wallets
Browser Passwords Saved
Online Account Authentication Cookies
Files Related to Finances or Crypto

Cyber researchers discovered payment data shared on Telegram that showcased how much the scammers earned for every victim scammed.

Who Are Behind The Scam?

This scam wasn’t run by amateurs; it was a well-organised cybercrime operation. A Russian-speaking group designed and executed this scam with fake companies and altered software through a planned strategy. Here’s who was behind it:

This operation is managed by the Russian-speaking cybercrime group “Crazy Evil”.
A sub-group called “Kevland” was managing the online job advertisements and disseminating the malware.
To give their scheme some legitimacy, the scammers created fictitious companies, a phoney website, and made false employee accounts.

What Happened After The Scam Was Exposed?

There is a possible concern for any person seeking employment. Once the scam was discovered, the fake site and bogus job openings were removed. Moving on to the next stage:

All bogus job listings were eliminated from CryptoJobsList.
The GrassCall website was disabled.
Web3 and crypto job seekers were provided with alerts.
Cybersecurity experts are still monitoring such crimes.

How To Stay Safe From This Scam

Scammers are employing deceitful job offers to lure individuals into downloading malicious applications. They claim to be recruiters who conduct interviews on questionable platforms. If you are searching for a job, always be on the lookout and utilise the following safety tips:

Do NOT download video calling applications that are obscure to you for job interviews.
Check the authenticity of the job offers on LinkedIn and crypto job platforms.
Refrain from conducting interviews on Telegram - genuine organisations use email or other formal means of communication.
Check the company website and the LinkedIn page for authenticity.
Install antivirus programs to scan for dangerous content and refrain from downloading files that look suspicious.

Conclusion

This scam exemplifies the increasing dangers surrounding job fraud within the Web3 and crypto industries. Cybercriminals are capitalising on fake LinkedIn job offers and Telegram chats to lure people into inadvertently installing malware. Job applicants need to be extra careful by verifying the employer and refraining from downloading any unfamiliar applications to escape such traps.

Join the conversation and stay informed! Visit the Jaagruk Bharat community page and be part of an active, engaged community as we work day and night to bring information to your fingertips.

1k Views

Add a comment here...

No comments available

Was this helpful?

For more content like this

Harsha Vardhanan

harsha_iyar

Thank you for posting valuable information ✨

23 Nov 2021

Verified User

Manjunath Nayak

nayak

Good portal for common man, very useful

23 Nov 2021

Verified User

Suraj Patil

suraj

Jaagruk Bharat does a fantastic job of breaking down complex policies into easy-to-read articles and videos, ensuring accessibility for all citizens.

23 Nov 2021

Verified User

Sankesh Hegde

sankesh

A very helpful website that aggregates and simplifies government guidelines, providing clear information in various languages for better public understanding.

23 Nov 2021

Verified User

ATHARV HANDE

@atharvhande744

Thank you very much for information ❤

23 Nov 2021

Verified User

Categories

Women

Insurance

Finance

Tax

Travel

Transport & Infrastructure

Food

Entertainment

Communication

Government ID Cards

E-commerce

Traffic guidelines

Miscellaneous

Housing and Sanitation

Sports

Startup

Environment and Safety

Education

Agriculture

Social cause

Jaagruk Bharat with its team work tirelessly to bring all government schemes, Sarkari Yojanas, policies and guidelines to you in a simplified and structured format.
Our team is at the forefront of gathering, verifying and breaking all central government and state government regulations uncomplicatedly.

Our mission and vision are to make the common citizen of India aware of all government-laid-out rules and policies in a single place. Thus, we Jagruk Bharat have created an all-inclusive portal for 1.5 billion Indian citizens to understand, utilize and avail benefits of govt schemes and policies and by bringing them under one roof.

Jaagruk Bharat (जागरूक भारत) is a one stop centralised destination where you can effortlessly find, understand, and apply for various government schemes. We are committed to ensuring transparency and empowering Indian citizens. Our goal is to keep India Jagruk about government policies, the latest news, updates, and opportunities.

जागरूक भारत अपनी टीम के साथ मिलकर लगातार काम करता है ताकि सभी सरकारी योजनाओं, नीतियों और दिशानिर्देशों को सरल और व्यवस्थित तरीके से आपके सामने पेश किया जा सके। हमारी टीम केंद्रीय और राज्य सरकार के सभी नियमों और विनियमों को आसानी से इकट्ठा करने, सत्यापित करने और प्रस्तुत करने में सबसे आगे है।

हमारा मिशन और दृष्टिकोण यह है कि भारत के हर नागरिक को सभी सरकारी नियमों और नीतियों से एक ही स्थान पर अवगत कराया जाए। इसलिए, हमने जागरूक भारत के रूप में 1.5 अरब भारतीय नागरिकों के लिए एक समग्र पोर्टल तैयार किया है, जहां वे सरकारी योजनाओं और नीतियों को समझ सकें, उनका उपयोग कर सकें और लाभ उठा सकें, सभी जानकारी एक ही छत के नीचे उपलब्ध है।

जागरूक भारत (Jagruk Bharat) एक केंद्रीकृत और सुव्यवस्थित गंतव्य है, जहां आप विभिन्न सरकारी योजनाओं को आसानी से खोज, समझ, और आवेदन कर सकते हैं, जिससे पारदर्शिता सुनिश्चित होती है और भारतीय नागरिकों को सशक्त किया जाता है।
हमारा उद्देश्य है कि भारत को सरकारी नीतियों, नवीनतम समाचारों, अपडेट और अवसरों के बारे में जागरूक बनाया जाए।जागरूक भारत (Jagruk Bharat) की मदद से आपकी कठिन से कठिन समस्या का आसान समाधान होगा...

अपने हक़ को अपनाओ ! जागरूक भारत पर आओ