[Singapore Authorities Warn of Cryptocurrency Fake Recruitment Scam, Resulting in $11.8 Million Losses]
According to a CNA report, the Singapore Police Force and the Cyber Security Agency jointly issued a warning on August 14 about a cryptocurrency scam disguised as fake recruitment, which has caused approximately $11.8 million in losses. Scammers impersonated recruiters from cryptocurrency companies, communicating with victims via emails sent from spoofed domain names. Under the pretext of technical programming tests, they lured victims into downloading malicious software onto company devices. This malware stole victims' session tokens, bypassed multi-factor authentication, and infiltrated their Bitbucket code repositories. The scammers then tampered with automated deployment instructions, remotely accessed internal servers, and ultimately bypassed transaction approval mechanisms to transfer cryptocurrency.
