Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
Registrar clientHold on 10 October 2026 suspended taikotalent.xyz, a domain tied to a fake-recruiter trojan.
7 stories, newest first · one card per story
Registrar clientHold on 10 October 2026 suspended taikotalent.xyz, a domain tied to a fake-recruiter trojan.
An oss-security moderator says a reported taikotalent.xyz fake-recruiter trojan looks AI-generated, though the domain exists.
Fake-recruiter trojan distributed via taikotalent.xyz has been taken down after the registrar placed the domain on clientHold on October 10.
Rust project warns attackers use fake recruiter interviews targeting crate owners to deploy RATs and compromise the package ecosystem.

North Korean WaterPlum actors posed as recruiters to infect 30,000 developers' PCs and steal $10.7M in cryptocurrency via BeaverTail, InvisibleFerret and other malware.
North Korean hackers masquerading as recruiters in a fake job-offer campaign that infected roughly 30,000 devices worldwide.

Ongoing social engineering campaign targets Rust maintainers via fake recruiters and video calls to compromise accounts and publish malicious crates.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views