One more attack on web3 developers:

Through https://playcrypterium.io (don't open) and https://discord.gg/MyZgrYnh (don't open) they distribute AMOS malware (OS X, Linux, Win) that steals cryptocurrency wallets.

The attack scenario is as follows:
— Ads, offers for artists and moderators are posted in the group-chat rooms (pic).
— An operator communicates with a person and asks verification questions (creating the appearance of filtering and selection).
— Then invited to Discord, where it is offered to download the game client and check the game (pic).
— For downloading, they send the user to the site (link above), where instead of playing the game, the user downloads malware (pic).

Discord has about 3667 users and 24 boosters for now. Discord users send messages when you're online (gm/hi). Moreover, they fill chats history with fake conversations from multiple users. Without deep thinking, it is very nature.

Virus-total Report is https://www.virustotal.com/gui/file/0c547caa2a441a4ee10cc04e68473ffa768303fab7f7658ad4efc2c84476f7da?nocache=1
C&C // C2 (server used to collect stolen data) is http://185.106.93.154/ (don't open)

Little bit about AMOS Stealer: https://telegra.ph/Atomic-Stealer---Obzor-loga-06-27

I think that next time, ICO/IEO investors may be targeted.
Never, never installs any software from recruiters or job offerers. Never send your private keys.

Pay attention and protect yourself, have a good night, my dear stranger!