Lazarus used LinkedIn hiring scam to breach CoinsPaid
One of the most notable attacks in which Lazarus lured a platform employee with a headhunting offer and installed malware during the interview process is the 2023 CoinsPaid hack.
Lazarus posed as a recruiter from Crypto.com and approached the target via LinkedIn messages. It is reportedly known that they spent six months studying CoinsPaid’s organizational chart and role-based permissions to identify targets. To install the malware, they even took the victim through multiple stages of the hiring process, and in the final coding test slipped in malware disguised as the assignment—a devious tactic.
Authors credited by the source: c4lvinlocked
Published by Holder based on an external source.
