JFrog exposes AccuraSoftHire cyberattack targeting software developers with fake job offers

Software supply chain and DevOps company JFrog has exposed an unreported cyberattack operation named AccuraSoftHire that targets software developers seeking new jobs. The decoy company features a careers site, client testimonials, a LinkedIn page, and ID-verified recruiters to deceive job seekers. During the hiring process, applicants are asked to complete take-home tests and install materials that allow malicious actors to deliver malware. Such sophisticated scams have previously impacted major platforms like Binance, raising significant security concerns across the industry. Experts advise developers to treat take-home tests as untrusted code and open unknown projects in restricted modes. Researchers anticipate an increase in similar attacks following previous high-profile security incidents.