Bảo vệ Khẩn cấp Không Lưu trữ: Tệp bằng chứng của bạn chỉ được phân tích trong bộ nhớ tạm và lập tức bị hủy vĩnh viễn sau khi quét xong. Không lưu nhật ký hay đám mây.
LinkedIn Fake Recruiter & Headhunter Detector: Spotting Infiltration Bots
Defending engineers and defense contractors from North Korean and state-sponsored recruiter malware campaigns.
Xác minh tính xác thực với Sealed Rose
Phân tích mạng nơ-ron tức thì · Miễn phí · Không cần tài khoản · Không lưu trữ dữ liệu · Xử lý trực tiếp trên RAM
State-sponsored threat actors (such as Lazarus Group) create thousands of fake LinkedIn recruiter profiles with AI-generated headshots. They reach out to software developers, defense contractors, and Web3 engineers with lucrative job offers, asking them to clone a GitHub repo or execute a coding challenge that installs remote access trojans (RATs).
Dấu hiệu cảnh báo nguy hiểm
1AI Headshot with Perfectly Centered Eyes
Headshot aligns with the StyleGAN/Midjourney eye-centering rule: pupils sit at the exact horizontal midpoint of the image canvas.
2Urgent Request to Run a Coding Challenge on Your Local Machine
They send a zip file or GitHub link containing obfuscated npm/pip dependencies with post-install malware scripts.
The "Contagious Interview" Malware Attack
- Malicious Dependency Poisoning: The coding test includes a `package.json` with a malicious `preinstall` hook that exfiltrates browser cookies and SSH keys.
Cách tự bảo vệ và xử lý
Run Recruiter Headshot Through Sealed Rose
Check for GAN/Diffusion face synthesis markers.
Never Run Unvetted Candidate Code on Your Bare Metal
Always sandbox coding challenges in ephemeral cloud VMs or isolated containers.
Câu hỏi thường gặp
Why are fake recruiters sending coding tests?▼
They use coding tests as a trojan horse to deliver malware directly onto developer laptops, stealing API keys, crypto wallets, and proprietary source code.
Hỗ trợ 23 Ngôn ngữ: