CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer

CrowdStrike warns of a phishing campaign targeting job seekers with a fake recruitment process. The campaign uses a malicious website to download a cryptocurrency miner disguised as a CRM application, performing checks to evade detection before installing. Trend Micro also reveals a fake proof-of-concept for a Windows security flaw, used to lure security researchers into downloading an information stealer.

*****
Written on