Fake video conferencing apps are targeting Web3 workers to steal their data

• Web3 pros has been targeted with fake job offers via Telegram
• They are later invited to a video call using an app called Meeten
• However the app is a fake, and installs an infostealer that grabs crypto data, and other sensitive information

Researchers are warning of a new “fake job” hacking campaign that targets primarily people working in the Web3 (blockchain) industry.

Experts at Cado Security Labs revealed the campaign started in September 2024, aiming to trick people into downloading infostealing malware to their devices, both for Windows and macOS.

In some examples observed by the researchers, the victims were first contacted on Telegram, from a typosquatted account that impersonated a victim’s contact. They were offered a job opportunity, and even shared an investment presentation from the target’s company, meaning the attack was thoroughly prepared in advance.

Stealing crypto

If the victim takes the bait ...