What’s happening
A growing scam trend involves attackers creating fake LinkedIn profiles impersonating employees of well-known crypto, Web3, and tech companies.
These scammers pose as:
Recruiters
Engineers
CTOs or other executives
Researchers or journalists
Their goal is to trick users — especially developers — into interacting with malicious content.
This is an industry-wide issue affecting many companies, not just a single organization.
How the scam works
A typical scenario:
You receive a connection request from someone claiming to work at a well-known company
They offer a job opportunity, collaboration, or interview
They invite you to a call (e.g., Zoom, Google Meet) or continue the process via chat
You are given a “test task” or “assessment.”
You are asked to:
Clone a GitHub repository
Run code locally
Download files or dependencies
The provided resources may contain malware designed to:
Steal private keys or credentials
Compromise your device
Gain access to your accounts
Additional tactics used by scammers
Creating networks of fake profiles that:
Endorse each other
Simulate real team structures
Using compromised accounts of real users to appear trustworthy
Targeting users who already have some connection to the company or industry
Moving conversations across platforms (LinkedIn → Telegram → Zoom)
Red flags to watch for
The profile:
Has limited activity or recent creation
Has inconsistent or vague work history
Uses stock or AI-generated profile photos
You are asked to:
Run unfamiliar code on your device
Clone private or suspicious repositories
The recruiter:
Pushes you to act quickly
Skips formal hiring steps
Communication happens outside official company channels
Multiple profiles appear to support each other artificially
How to stay safe
Never run code from untrusted sources
Verify the person:
Check profile history, connections, and activity
Cross-check via official company channels
Be cautious with:
Unsolicited job offers
“Take-home tasks” from unknown recruiters
Avoid downloading files or joining calls via suspicious links
Treat unexpected outreach with skepticism
What to do if you encounter this
Do not download or execute any files
Report the profile to LinkedIn
Stop communication immediately
Warn others if you identify coordinated fake accounts
Important note
Legitimate companies typically:
Follow structured hiring processes
Do not ask candidates to run unknown code without proper context
Use official communication channels
If something feels off, it probably is.