No Coinbase doesn t want to offer you a job - it s a North Korean scam TechRadar Skip to main content TechRadar is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Here's why you can trust us. No Coinbase doesn t want to offer you a job - it s a North Korean scam By Sead Fadilpašić published 8 August 2022 Fake job offers are still a major threat (Image credit: André François McKenzie / Unsplash) Audio player loading… Infamous North Korean threat actor Lazarus Group has been spotted attempting to lure blockchain developers with fake job offers laden with malware. Cybersecurity researchers from Malwarebytes have discovered a new campaign in which Lazarus assumes the identity (opens in new tab) of Coinbase, one of the world's biggest and most popular cryptocurrency exchanges. The criminals then reach out to blockchain developers with a job offer for the role of "Engineering Manager, Product Security", and even conduct a few interviews, to make the whole campaign more believable. At one point, however, the attackers will share a file, seemingly a PDF, with details on the alleged job position. The only thing this file has with a PDF is the icon, however, as it's, in fact, an executable - Coinbase_online_careers_2022_07.exe. Besides the .exe, the threat actor will also deploy a malicious DLL. Fake job offers galore These files will then connect to GitHub, which servers as a command & control (C2) server, which shares further instructions on how to best infect the endpoint. The "fake job offer" type of attack is nothing new. In fact, the biggest crypto theft of all time, a $600 million-heavy attack on the Ronin bridge, happened in the same manner. One of Ronin's developers was approached, via LinkedIn, by someone pretending to be a headhunter looking for quality developers. One thing led to another, and the victim ended up downloading a weaponized PDF file which eventually gave the attackers the keys to Ronin's kingdom. Read more> This latest LinkedIn scam sends fake job offers to lure victims in (opens in new tab) > An elaborate LinkedIn scam led to one of the largest heists in crypto history (opens in new tab) > Here's our rundown of the best antivirus tools right now (opens in new tab) The FBI pointed its finger to Lazarus Group for this attack, as well. Regardless of if it ends up being true or not, this threat actor is by no means a stranger to fake job offers. The group has already used General Dynamics and Lockheed Martin for the same purpose. Lazarus usually attacks banks, cryptocurrency exchanges, NFT marketplaces, and sometimes people known for holding a heavy bag of cryptocurrencies.These are the best firewalls (opens in new tab) today Via: Bleeping Computer (opens in new tab) Sead Fadilpašić Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he's written for numerous media outlets, including Al Jazeera Balkans. He's also held several modules on content writing for Represent Communications. See more Computing news Are you a pro? Subscribe to our newsletter Sign up to theTechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Thank you for signing up to TechRadar. You will receive a verification email shortly. There was a problem. Please refresh the page and try again. MOST POPULARMOST SHARED1The iPhone 14 Pro is made of the wrong stuff; the Pixel 7 proves that to me2Stop saying Mario doesn't have an accent in The Super Mario Bros. Movie3Google Pixel Tablet is what Apple should've done ages ago4RTX 4090 too expensive? Nvidia resurrects another old favorite5More than one million credit card details leaked online1The iPhone 14 Pro is made of the wrong stuff; the Pixel 7 proves that to me2iPhone 15 tipped to come with an upgraded 5G chip3If this feature succeeds for Modern Warfare 2, Microsoft can't ignore it4Apple October launches: the new devices we might see this month5The Rings of Power episode 8 trailer feels like one big Sauron misdirect Technology Magazines (opens in new tab)● (opens in new tab)The best tech tutorials and in-depth reviewsFrom$12.99 (opens in new tab)View (opens in new tab)