Web3 Developer Discloses Recruitment Phishing Incident, Device Infected with Trojan After Opening Cursor Project

TechFlow reported on November 6 that Web3 developer brucexu.eth disclosed he was targeted by a fake recruitment phishing attack in January this year. After using Cursor to open the project directory provided by the other party, his device was infected with a Trojan, but ultimately no assets were lost.

He said the attackers provided a code repository through the recruitment process; he initially believed it would be safe as long as he only viewed the code and did not run it. However, after analyzing a sample, SlowMist founder Yu Xian warned that opening the project directory could also trigger malicious code. After confirming the infection, he transferred assets, rotated credentials, and reinstalled the system.

Source: TechFlow