How Malware Uses Fake LinkedIn Job Offers
Fake job offers are the perfect delivery vehicle for malware. They don't rely on some obvious "Urgent: Your Account is Locked" scare tactic. Instead, they target your professional ambition and the basic trust you have in someone who says they want to pay you a lot of money to solve a hard problem. Last week, I got a LinkedIn message from a recruiter at a small crypto startup. We chatted for a few days. She described a broken proof-of-concept they needed a lead engineer for, which sounded exactly like the kind of mess I enjoy cleaning up. Then she sent me a public GitHub repo to review. I didn't clone it to my machine. I've seen this movie before. Instead, I spun up a throwaway VPS on Hetzner and pointed Pi at it in read-only mode, using only file-reading tools. It turns out the "broken proof-of-concept" was actually a very clever trap. The Social Engineering Hook Attackers don't start with malware; they start with a persona. They build L...