Attackers are posing as a Web3 company and using remote job interviews to trick candidates into deploying and running malicious projects locally
Attackers are posing as a Web3 company and using remote job interviews to trick candidates into deploying and running malicious projects locally. The disguised application is presented as a real estate and crypto investment platform called RoyalCity.
- Confidence
- High
- First seen
- 22 Sep 2026, 07:38 UTC