According to CoinMeta, the Singapore Police Force and the Singapore Cybersecurity Agency stated that a fraudulent cryptocurrency recruitment scam resulted in a loss of approximately $11.8 million for a company. Victims initially contacted scammers posing as recruiters on LinkedIn, then proceeded through the interview process, which ultimately gave the attackers access to the victims' employers' systems. The scammers communicated with the victims via forged domain names and emails, and requested them to complete a technical coding assessment on the company's devices, during which malware was downloaded. The attackers used the stolen session tokens to bypass multi-factor authentication, gained access to the victims' Bitbucket accounts, modified the company's automatic software deployment instructions, and eventually carried out cryptocurrency transfers by circumventing transaction restrictions and approval checks, resulting in a loss of $11.8 million.