New Web3 Recruitment Scam Uses AI Tool Relay to Steal Wallet Data

SlowMist identifies malware disguised as 'Relay' AI interview tool targeting Web3 users, stealing credentials and wallet data on macOS and Windows systems.

Woofun AI reports that SlowMist has identified a novel recruitment scam targeting Web3 practitioners, where attackers impersonate recruiters to distribute malware disguised as an AI conference application named "Relay". The malicious software, which affects both macOS and Windows platforms, is designed to exfiltrate sensitive data including browser credentials, encrypted wallet information, Keychain entries, and Telegram sessions. SlowMist has analyzed the sample and detailed the attack chain, advising users to exercise caution with unfamiliar software during online interviews and to monitor for unauthorized installation requests or system password prompts.