Fake recruiter campaign targets crypto developers with RAT

Reported 13 Apr 2026 by otx · Severity: medium

A sophisticated fake recruitment campaign named 'graphalgo' has been active since May 2025, targeting JavaScript and Python developers in the cryptocurrency sector. Attackers approach victims through LinkedIn, Facebook, and Reddit with fabricated job opportunities from fake block