Hackers posed as LinkedIn recruiters to infiltrate a cryptocurrency repository through a sophisticated social engineering campaign. During the fake interview process, the attackers delivered a remote code execution payload concealed within a standard test file. This incident underscores the ongoing threat of targeted malware disguised as routine developer tasks.