A Warning for Blockchain Developers: Beware of Crypto Scammers on Upwork
If you’re a blockchain developer looking for freelance work on platforms like Upwork, be cautious. Scammers are targeting unsuspecting developers in an attempt to steal their cryptocurrencies. These bad actors have turned to Upwork as a means to deceive developers into downloading malicious software that allows them to drain funds from non-custodial wallets.
How the Scam Works
The scam begins with recruiters reaching out to potential victims on LinkedIn. They instruct the developers to download and debug code from two npm packages hosted on a GitHub repository. However, these packages contain a hidden malicious script that gains access to the victim’s device once executed.
A Developer’s Loss
Murat Çeliktepe, a blockchain developer based in Antalya, Turkey, fell victim to this scam. After opening the npm packages as instructed, he unknowingly provided remote access to his device. As a result, he lost over $500 from his MetaMask wallet in cryptocurrencies.
A Widespread Issue
Çeliktepe is not alone in his experience. Other developers have reported similar encounters with these recruiters on LinkedIn. This highlights the prevalence of scams specifically targeting blockchain developers.
A Persistent Strategy
Scammers continue to target blockchain developers through job platforms like LinkedIn and Upwork, showing their persistence in exploiting this vulnerable group. This is not the first time such tactics have been used – in 2022, North Korea-affiliated hackers stole $600 million from Axie Infinity by sending a fake job offer via LinkedIn.
Hot Take: Protect Yourself from Crypto Scams
As a blockchain developer, it is crucial to stay vigilant and protect yourself from potential scams. Be wary of unsolicited job offers, especially if they involve downloading and executing code from unknown sources. Verify the legitimacy of the recruiter and thoroughly research any platforms or packages before engaging with them. Additionally, use trusted wallets and enable multi-factor authentication to enhance your security. By staying informed and cautious, you can safeguard your cryptocurrencies and avoid falling victim to crypto scams.
By
By
By
By
By
By