Received a web3 project dev requirement on LinkedIn, and after a couple of messages, they sent me a GitHub repository. At first look, it seemed normal, but the overall gig looked suspicious, so I thought let’s dig deeper. I looked into it with a couple of friends, and the way they have done this, is soo clever and complex. Will share a longer thread soon

🧵 A Deep Dive into a Sophisticated Crypto Scam

Recently, I began receiving similar "token staking project" messages on LinkedIn and decided to investigate one to understand the scheme. The sender asked me to review a BitBucket repository before scheduling a call. While this might seem innocuous, it's part of a growing trend of LinkedIn scams where attackers distribute malicious code.

My friends (shoutout to @atharvabuilds) and I investigated the project thoroughly. Here's what we uncovered 🔍

https://warpcast.com/avneesh/0xa85a5876

was a couple days late due to exams but here we go 🫡