$15 Million Stolen in Singapore Cryptocurrency Scam Involving Fake Job Offers

A cryptocurrency scam targeting developers and technical professionals has resulted in $15.1 million in losses for a victim in Singapore.

The scammer impersonated a recruiter from a cryptocurrency-related company on LinkedIn, then used fake email domains to communicate with the victim via email and video interviews on Google Meet, disabling their video function.

The victim was directed to a fake website to complete a technical coding assessment, during which malicious software was downloaded, allowing the scammer to gain access to the victim's BitBucket account linked to their company's code repository.

The scammers used this access to bypass transaction limits and approval checks on the company's internal servers, carrying out cryptocurrency transfers among other actions.