SlowMist: Discovery of New Type of Recruitment Scam Targeting Web3 Practitioners, Malware Disguised as an AI Interview Tool

July 29th, SlowMist reported that a recent recruitment scam targeting Web3 practitioners has been discovered. The attacker impersonates a recruiter, luring victims to install an AI conference software named "Relay," which is actually a malicious information-stealing program.

The malware targets both macOS and Windows users, capable of stealing browser credentials, encrypted wallet data, Keychain data, Telegram sessions, and other sensitive information. SlowMist has completed sample analysis and disclosed the operation of this attack chain.

SlowMist reminds individuals to be cautious when installing unfamiliar software during online interviews or recruitment processes, avoid running unverified applications, and pay attention to unusual installation requests or system password prompts.