Fake CrowdStrike Job Offer Emails Target Developers with Crypto Miners

by Justin Erickson

Cybercriminals are impersonating cybersecurity firm CrowdStrike in a phishing campaign targeting developers with fake job offers. The scam emails contain a fake software download that, when executed, installs cryptocurrency mining malware on the victim’s system. These attacks exploit the trust associated with CrowdStrike’s name to bypass suspicion and lure targets into opening the fraudulent message. CrowdStrike warns that this is not the only fake job offer scam out in the wild. They advise recipients to refuse downloading any software for an interview, verify employment offers through their hiring communications (recruiting@crowdstrike.com), and avoid any interviews held through instant messaging and email.