User kissmyass13_ shared a warning about a new hiring scam. They applied for a "Digital Asset Portfolio Analyst" position at Epsilon Acquisition Services via LinkedIn. Soon after, they received an email from the company's actual corporate domain inviting them to a video interview.

The call was scheduled on an unfamiliar platform called teleglass. According to user kissmyass13_, the interviewer initially turned on her camera and audio, but soon claimed she couldn't hear the candidate. To solve the "technical issue", the victim was asked to download a special app to access the microphone. The link led to a resource called download-storage, and the installation was launched via a script that doesn't save files to the disk but runs directly in the RAM. Fortunately, the user stopped in time when the system requested an administrator password and reset their macOS.

As it turned out later, Epsilon Acquisition Services is a real company that had long since ceased operations, whose brand and domain were taken over by scammers. In the comments, users discussed the red flags of this scheme. According to user yarevande, legitimate employers use standard platforms like Zoom, and if the interviewer doesn't speak and hides their camera, it's a 100% scam. According to users MultiFazed and Infinite-Grade-4485, a script targeting macOS and Linux that runs in memory is most likely an info-stealer designed to steal passwords. User tsdguy emphasized that no real recruiter would ask an applicant to download third-party scripts, and advised completely reinstalling the OS at the slightest suspicion of infection.