Unknown threat actors have been discovered using the Infosteeler Trojan to target graphic designers and artists, according to security researchers.
Messages claiming to offer potentially lucrative job possibilities are being sent to artists on major sites like DeviantArt and Pixiv.
The employment offer is only a ruse, as the sender’s true intention is to transmit an information-stealing Trojan that has a “good probability” of evading antivirus detection.
Passwords and other identity-related data, as well as cryptocurrency wallets, credit card information, and other similar data, are often stolen through browsers.
The artist is asked to work on the NFT project, according to the employment offer. In this context, NFTs (non-fungible tokens) are works of art kept on the blockchain.
They’ve recently gained a lot of attention and have a lot of value (some cost tens of millions of dollars).
The artist will be told what is required of them in the proposal, and they will be asked to provide their CV or résumé. Project managers will also provide a link to examples of past NFT work.
The link links to a password-protected RAR archive named ‘Cyberpunk App Examples (pass 111)rar,’ which the attackers claim is effectively the project’s style guide.
To read our blog on “‘Ready, steady, NFT:’ Ukrainian government accepts NFT donations,” click here