coinedition.com
On-chain sleuth ZachXBT has discovered yet another crypto scam, this time on MoonCarl’s crypto job posting website “cryptojob.com.” The scam is in the form of a job listing featured on the website by the company “Eco Land.” ZachXBT claimed that the fraudulent company was trying to get applicants to download malware disguised as a game.
Looks like MoonCarl’s job posting website has a scam called “Eco Land” attempting to get applicants to download malware.
— ZachXBT (@zachxbt) August 8, 2023
Even is listed there as a premium job. pic.twitter.com/5LfYwu8LJf
“@EcoTechLand is a Scam website,” said a user named Leandro Henflen, who tried to apply for the job. Henflen explained that the site tried to install malware on his computer. He added that they attracted users via job postings and then offered them games. However, thanks to the antivirus on his PC, he was saved from the malware that came with the game.
ZachXBT elaborated that this was not the first time that the site had allowed similar scams to run. The crypto detective then redirected his followers to another such fraudulent effort on cryptojob.com, exposed by an analyst that went by the name “NFT_Dreww.eth.”
🎮𝐒𝐎𝐂𝐈𝐀𝐋 𝐄𝐍𝐆𝐈𝐍𝐄𝐄𝐑𝐈𝐍𝐆 𝐏𝟐𝐄 𝐒𝐂𝐀𝐌 𝐉𝐎𝐁𝐒🎮
— NFT_Dreww.eth (@nft_dreww) July 23, 2023
🧵Looking for a job? Want to earn $$$ in a P2E game? CryptoJobs is a common resource for Web3 jobs BUT also an attack vector for scams..
The below job posting is an elaborate scam but how can you tell? Lets see⤵️ pic.twitter.com/qOqidINYi4
According to NFT_Dreww.eth, cryptojob.com featured a job posting asking for a blockchain developer for Neon War P2E Games. “P2E Scams are not new,” explained the analyst. “They use multiple attack vectors to scam you. This was one of the more elaborate scams due to the nature of the social engineering of this.”
Apparently, after users applied for the P2E developer job, the company would immediately reach out and schedule an interview in their discord. However, for the interview, the candidate would have to “verify” themselves. For the verification process, the applicant would have to go to a website and download the launcher to get an ID.
“After you install these files the hacker can actually do multiple things, take remote control of your computer, steal and send information to their remote server, and much much more,” said NFT_Dreww.eth.
Carl Runefelt, aka MoonCarl, the founder of cryptojobs.com, has yet to respond to these allegations. Runefelt, with over a million followers on Instagram and several crypto companies to his name, is a prominent personality in the crypto space.