<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:media="http://search.yahoo.com/mrss/"
>

<channel>
	<title>Russia-based cybercrime group called &quot;Crazy Evil Archives - Coin Engineer</title>
	<atom:link href="https://coinengineer.net/blog/tag/russia-based-cybercrime-group-called-crazy-evil/feed/" rel="self" type="application/rss+xml" />
	<link>https://coinengineer.net/blog/tag/russia-based-cybercrime-group-called-crazy-evil/</link>
	<description>Btc, Coins, Pre-Sale, DeFi, NFT</description>
	<lastBuildDate>Thu, 27 Feb 2025 10:48:36 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://coinengineer.net/blog/wp-content/uploads/2024/04/cropped-Coin-Engineer-Logo-Favicon-2-32x32.png</url>
	<title>Russia-based cybercrime group called &quot;Crazy Evil Archives - Coin Engineer</title>
	<link>https://coinengineer.net/blog/tag/russia-based-cybercrime-group-called-crazy-evil/</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>Scammers Empty Wallets with Fake Crypto Job Listings and &#8216;GrassCall&#8217;</title>
		<link>https://coinengineer.net/blog/scammers-empty-wallets-with-fake-crypto-job-listings-and-grasscall/</link>
					<comments>https://coinengineer.net/blog/scammers-empty-wallets-with-fake-crypto-job-listings-and-grasscall/#respond</comments>
		
		<dc:creator><![CDATA[Emre Yumlu]]></dc:creator>
		<pubDate>Thu, 27 Feb 2025 13:30:19 +0000</pubDate>
				<category><![CDATA[Crypto News]]></category>
		<category><![CDATA[cybercrime group]]></category>
		<category><![CDATA[fake crypto job listings]]></category>
		<category><![CDATA[Russia-based cybercrime group called "Crazy Evil]]></category>
		<category><![CDATA[social engineering scheme]]></category>
		<guid isPermaLink="false">https://coinengineer.net/blog/?p=37463</guid>

					<description><![CDATA[<p>Scammers have launched a complex social engineering scheme with fake crypto job listings, a fake company, and a meeting app. Scammers Target Crypto Wallets with the &#8220;GrassCall&#8221; App Social engineering scammers are using fake job listings and a new malicious app called &#8220;GrassCall&#8221; to deploy information-stealing software targeting crypto wallets. The app is designed to</p>
<p>The post <a href="https://coinengineer.net/blog/scammers-empty-wallets-with-fake-crypto-job-listings-and-grasscall/">Scammers Empty Wallets with Fake Crypto Job Listings and &#8216;GrassCall&#8217;</a> appeared first on <a href="https://coinengineer.net/blog">Coin Engineer</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p><a href="https://coinengineer.net/blog/massive-bybit-hack-1-5-billion-loss-explained/"><strong>Scammers</strong> </a>have launched a complex <strong>social engineering scheme</strong> with <strong>fake crypto job listings</strong>, a fake company, and a meeting app.</p>
<h2 data-start="0" data-end="55">Scammers Target Crypto Wallets with the &#8220;GrassCall&#8221; App</h2>
<p data-start="57" data-end="277"><strong>Social engineering scammers</strong> are using fake job listings and a new malicious app called &#8220;GrassCall&#8221; to deploy information-stealing software targeting crypto wallets. The app is designed to steal users&#8217; wallet information.</p>
<p data-start="279" data-end="561">According to BleepingComputer&#8217;s report on February 26, the scammers have now abandoned the scheme, and <strong>websites and LinkedIn accounts tied to the scam have been taken down</strong>. Hundreds of people targeted by the scam reported that their wallets were drained after downloading GrassCall.</p>
<p data-start="563" data-end="872">The scam is linked to a <strong>Russia-based cybercrime group called &#8220;Crazy Evil,&#8221;</strong> which focuses on crypto theft through social engineering tactics. Cybersecurity firm <strong>Recorded Future</strong> reported in January that the &#8220;Crazy Evil&#8221; group had conducted more than ten scams targeting the cryptocurrency space on social media.</p>
<h2 data-start="874" data-end="940">&#8220;Crazy Evil&#8221; Group Targets Crypto Wallets with Fake Crypto Company</h2>
<p data-start="942" data-end="1318"><strong>The &#8220;Crazy Evil&#8221; cybercrime group</strong> created a fake crypto firm called <strong>&#8220;Chain Seeker&#8221;</strong> and posted job listings on LinkedIn and popular Web3 job search sites. Those who applied were directed to contact the firm&#8217;s marketing chief on Telegram, where they were then asked to download the<strong> malicious &#8220;GrassCall&#8221; app</strong>. The app was designed to steal the targets&#8217; crypto wallet information.</p>
<p data-start="942" data-end="1318"><img fetchpriority="high" decoding="async" class="size-full wp-image-149589 aligncenter" src="https://coinmuhendisi.com/blog/wp-content/uploads/2025/02/chain.webp" alt="chain " width="813" height="255" /></p>
<p data-start="1320" data-end="1566">Comments from job seekers on<strong> LinkedIn and X pointed out how professionally the scam</strong> was organized and how everything appeared very legitimate. However, many job listings were removed, with only one still active on LinkedIn at the time of writing.</p>
<p data-start="1568" data-end="1818" data-is-last-node="" data-is-only-node="">Recorded Future has warned that <strong>scams targeting crypto and NFT traders</strong> and gaming professionals may increase. Users who suspect their devices have been compromised are advised to change their passwords and transfer their crypto assets to new wallets.</p>
<hr />
<p data-start="1568" data-end="1818" data-is-last-node="" data-is-only-node=""><em>You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our <a href="https://t.me/coinengineernews" target="_blank" rel="noreferrer noopener nofollow"><strong>Telegram, </strong></a><a href="https://www.youtube.com/@CoinEngineer" target="_blank" rel="noreferrer noopener nofollow"><strong>YouTube</strong></a>, and <a href="https://twitter.com/coinengineers" target="_blank" rel="nofollow noopener"><strong>Twitter</strong></a> channels for the latest <a title="News" href="https://coinengineer.net/blog/news/" data-internallinksmanager029f6b8e52c="7">news</a> and updates.</em></p>
<p>The post <a href="https://coinengineer.net/blog/scammers-empty-wallets-with-fake-crypto-job-listings-and-grasscall/">Scammers Empty Wallets with Fake Crypto Job Listings and &#8216;GrassCall&#8217;</a> appeared first on <a href="https://coinengineer.net/blog">Coin Engineer</a>.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://coinengineer.net/blog/scammers-empty-wallets-with-fake-crypto-job-listings-and-grasscall/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<media:content url='https://coinengineer.net/blog/wp-content/uploads/2025/02/scam_ce.jpg' type='image/webp' medium='image' width='1920' height='1080'><media:title type='plain'> <![CDATA[USA]]></media:title><media:thumbnail url='https://coinengineer.net/blog/wp-content/uploads/2025/02/scam_ce.jpg' width='58' height='33' /></media:content>	</item>
	</channel>
</rss>
