Web3 Job Seekers Warned of Malicious Code Traps During Interviews

According to Odaily, Web3 job seekers have been cautioned about potential malicious code traps during interviews. The warning comes from SlowMist's Cosine, who highlighted an incident where attackers impersonated @seracleofficial, instructing candidates to review and execute code hosted on Bitbucket. Once the victims cloned the code, the program immediately scanned all local .env files, stealing private keys and other sensitive information. SlowMist experts identified this type of backdoor as a typical stealer, capable of collecting passwords saved in browsers, mnemonic phrases, and private keys from crypto wallets. They emphasized the importance of conducting suspicious code reviews in isolated environments to prevent direct execution on real devices, which could lead to attacks.