Fake LinkedIn Crypto Job Scams Have Cost $11.8M: Singapore
Malware planted during a bogus coding assessment harvested a session token, bypassing multi-factor authentication to reach a code repository.
We haven't written up this one. Decrypt has the full story — the link below goes straight to it.