Singapore Crypto Job Scams Cost $11.8M via Malware

The notable part is the attack path, not the losses: session-token theft defeats multi-factor authentication by design, so the usual security advice offers little protection once malware runs on a work machine. It also reframes hiring itself as an attack surface, with recruiters and take-home assessments as delivery vehicles. For Singapore's crypto workforce, the practical question is whether firms start treating candidate-side tooling as a security boundary, and whether similar campaigns surface in other crypto hubs.