ClickFake Interview: Lazarus Group’s New Crypto Heist via Fake Job Offers

The Lazarus Group has launched ClickFake Interview, a new campaign targeting job seekers in the cryptocurrency sector, particularly centralized finance (CeFi). Using fake job interview websites, attackers deploy malware through a deceptive technique called ClickFix, tricking victims into installing backdoors on Windows and macOS. The GolangGhost backdoor serves as the final implant, granting remote access and enabling attackers to steal browser data, credentials, and cryptocurrency wallets.