Singapore's secret recruitment fraud cost the company $11.8 million

The Singapore Police and the Singapore Cyber Security Authority stated that a fraudulent and encrypted money recruitment fraud had resulted in a loss of approximately $11.8 million for a company. The victim initially contacted the fraudster who impersonated the recruiter on LinkedIn and then entered the interview process, eventually giving the attackers access to the victim ' s employer. Fraudsters communicate with victims through false domain names and e-mails and require them to complete technical coding assessments on company equipment, during which malicious software is downloaded. The attackers used the stolen conversational tokens to over-certify, enter the victim ' s Bitbucket account, revise the company ' s automated software deployment instructions and eventually carry out encrypted currency transfers by circumventing transaction restrictions and clearance checks, resulting in a loss of $11.8 million。