Search I’ve been hacked Advice Menu

Deception (social engineering): Private individual, Switzerland 2026

A supposed recruiter offered an IT professional a job at a well-known company via LinkedIn.

  • Incident · 06.2026 · Switzerland
  • Evidence: confirmed by an authority
  • Deception (social engineering)
  • Malware

As of

On this page
  1. What happened
  2. Who would have paid?
  3. Lessons
  4. Sources
  5. Similar cases

What happened

In the technical interview, the person was asked to download a private GitHub repository and solve a programming task; in the process, an infostealer was installed unnoticed. It was designed to read out crypto wallets, stored login data and browser cookies and send them to the attackers.

Affected
Private individual (anonymous)
Industry
Private individual
Loss
no reliable figure
Business interruption
unknown
Ransom demanded / paid
unknown / unknown
Data affected
Crypto wallets, stored login data, browser cookies (target of the infostealer; exfiltration not reported)
Bankruptcy
no
Entry point
fake recruiter on LinkedIn, rigged programming task on GitHub

What would cyber insurance have paid?

That depends on the terms. Whether those affected were insured: unknown.

  • Data recovery

    Remove malware, restore data and devices

    Mostly no information 15 of 29 private products cover it fully, as an add-on or with limits.

  • Identity theft

    Orders and accounts in your name

    Mostly limited 22 of 29 private products cover it fully, as an add-on or with limits.

  • IT help without a loss

    Hotline and advice before anything happens

    Mostly no information 14 of 29 private products cover it fully, as an add-on or with limits.

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.

What we can learn

Code from a job application test never belongs on the computer where passwords and wallets are stored.

Get free advice

Sources

Similar cases