{
  "id": 14288211,
  "title": "30,000 Machines Hacked by Fake Job Offers. Mine Was Almost Next.",
  "url": "https://urgent.news/2026/10/13/30-000-machines-hacked-by-fake-job-offers-mine-was-almost-next",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-13T20:43:49.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/bibekkhatri1115/30000-machines-hacked-by-fake-job-offers-mine-was-almost-next-f37"
  },
  "original_language": "en",
  "account": "A Russian recruiter named Carmlize contacted the reporter without an interview, asking them to clone a GitHub repository and run the technical assessment. The reporter's instincts told them something was off, and after investigating further, they discovered that this was part of a massive hacking campaign where over 30,000 machines in more than 100 countries were compromised within eight months. The hacker used fake job interviews to gain access to developers' machines, stealing crypto wallets, browser cookies, SSH keys, and other sensitive information. The reporter found several red flags: the recruiter's LinkedIn profile had few posts and weak work histories, the company had no website, press, or customers, and the code contained an npm token and a Tailwind plugin that could download malicious packages without the developer's knowledge.",
  "summary": "I got hired without an interview. That alone should have told me everything. A \"recruiter\" from a company called Carmlize added me to their Slack workspace. Nobody called me, nobody asked about my experience, and I never spoke to an engineer. The first real message I got was a link to a GitHub repo and a friendly \"Here's the technical assessment, clone it and get it running.\" I've done enough…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}