The job market has been underperforming over the past few years, especially in the tech sector, causing many people to actively look for work.

Scammers are taking advantage of this. They've come up with a new trick, pretending to be recruiters and spreading cryptocurrency miners on people's devices.

It starts with an email inviting the person to schedule an interview. However, when they click the link, it installs a malicious application that secretly mines cryptocurrency. This application hijacks your computer's resources, such as the CPU and GPU, significantly reducing its performance.

I'm giving away the latest and greatest AIRPODS PRO 2

what you need to know

The malicious campaign reportedly started with an email that tricked victims into thinking it was part of the recruitment process. secret reading. In most cases, the emails pretend to be from recruiters at cybersecurity company CrowdStrike.

The fraudulent email contains a link that claims to take the recipient to a website where an interview can be arranged. However, in reality, it redirects victims to a malicious website that offers downloads of a so-called "CRM application."

What is artificial intelligence (AI)?

The website offers download options for Windows and macOS. No matter which option the victim chooses, the download will be a Windows executable written in Rust. The executable then downloads the XMRig cryptominer.

The executable performs several environmental checks to analyze the device and avoid detection. It scans running processes, checks the CPU, and more. If the device passes these checks, the executable will display a fake error message while secretly downloading the additional payload required to run the XMRig miner.

Here's what ruthless hackers stole from 110 million AT&T customers

How do crypto miners affect your computer?

Crypto mining applications can significantly affect your computer's performance. Once installed, it hijacks your computer's resources, including the CPU and GPU, to secretly mine cryptocurrency. This process requires a lot of computing power, which can cause your system to slow down drastically. You may notice that your computer becomes unresponsive, runs hotter than usual, or consumes more power.

In some cases, prolonged use of a cryptocurrency mining rig can also lead to hardware damage due to increased stress on components. Additionally, these miners often run in the background without your knowledge, making it harder to detect problems before damage occurs.

CrowdStrike is aware of the scam and advises individuals to remain vigilant. “This campaign highlights the importance of being wary of phishing scams, particularly those targeting job applicants. Individuals in the recruitment process should verify the authenticity of CrowdStrike communications and avoid downloading unsolicited files," this The company said in a blog post.

“Organizations can reduce the risk of these attacks by educating employees on phishing tactics, monitoring suspicious network traffic, and employing endpoint protection solutions to detect and block malicious activity.”

Click here to get Fox business anytime, anywhere

Beware of Encrypted PDF Files as Latest Trick to Deliver Malware to You

5 Ways to Avoid Job Interview Scams

1. Check if you applied for the position: If you receive an unsolicited invitation to an interview, think back to whether you actually applied for the job or company. Scammers often target job seekers at random, hoping someone will take the bait. If you didn't apply, it's probably a scam. Please be sure to confirm with the company directly before proceeding.

2. Verify the recruiter’s qualifications: Always double-check the recruiter's details before replying to an email or clicking on any link. Verify their email address, LinkedIn profile, and company affiliation. Legitimate companies will use official email domains rather than free services like Gmail or Yahoo.

3. Avoid downloading unsolicited files: Please be cautious about emails asking you to download any files or applications. Legitimate recruiting processes rarely require you to install software. If unsure, please contact the company directly to confirm the request.

4. Click the Check before you click link: Hover over any link in the email to see its actual URL. Scammers often use URLs that mimic legitimate websites but are slightly different. If a link looks suspicious, avoid clicking on it.

5. Use powerful anti-virus software: Use powerful antivirus or endpoint protection software to detect and block malicious downloads. Update your security tools regularly to ensure they can effectively handle new threats.

The best way to protect yourself from malicious links that install malware and potentially access your private information is to install antivirus software on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the 2025 winners of the best antivirus protection for your Windows, Mac, Android, and iOS devices.

What to do if your bank account is hacked

Kurt's key takeaways

Cybercriminals are always trying to come up with new ways to take advantage of people. While this particular scam is more focused on using your computer resources rather than stealing data, it's still very dangerous. It shows that if hackers can easily install software on your computer, they can also go on to steal your financial information and other personal data. Be sure to verify the emails you receive and try not to download anything you don't trust.

Have you ever received a suspicious email that looked like a job opportunity? Please write to us Cyberguy.com/contact

Click here to get the Fox News app

For more of my tech tips and security alerts, subscribe to my free CyberGuy Reports newsletter: Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you'd like us to cover.

Follow Kurt on his social channels:

Answers to CyberGuy’s most frequently asked questions:

New news from Kurt:

Copyright 2025 CyberGuy.com. all rights reserved.