Singapore Authorities Warn of Cryptocurrency Fake Recruitment Scams, Resulting in $11.8 Million Losses

According to CNA, the Singapore Police Force (SPF) and the Cyber Security Agency (CSA) jointly issued a warning on August 14 that a cryptocurrency scam utilizing fake recruitment has caused losses of approximately US$11.8 million. Scammers impersonated recruiters from cryptocurrency companies, communicated with victims via emails from spoofed domains, and induced them to download malware onto company devices under the pretext of technical programming tests. The malware stole victims' session tokens, bypassed multi-factor authentication to infiltrate their Bitbucket code repositories, then tampered with automated deployment instructions and remotely accessed internal servers, ultimately bypassing transaction approval mechanisms to complete cryptocurrency transfers.