🚨 Web3 Security Warning — Social Engineering Can Look VERY Legit I had a pretty eye-opening experience today that I want to share, especially with other founders and people active in Web3. I was contacted directly by the verified @BeaconLayer X account about appearing on their podcast. Nothing about the initial interaction screamed “scam.” The account has over 100K followers, has been around for years, and there are previous podcast episodes with other Web3 founders and builders. I thought I had done my homework. Today was the scheduled interview. I was sent what was presented to me as a StreamYard recording link: streamyard.host09us[.]com When I opened it, instead of joining StreamYard in my browser, Windows prompted me to install an application. That immediately bothered me. The installer showed: Publisher: CODE LOFTS d.o.o. Source: pixel-rocket[.]com Neither was StreamYard. So I stopped. I DID NOT INSTALL IT. I told them that because of the security risks in Web3, I don’t install unfamiliar software and asked them to send me a normal StreamYard browser guest link. They insisted the software was legitimate and said it provided functionality beyond the browser version. That didn’t sit right with me because StreamYard’s own website says its recording studio runs directly in the browser and guests don’t need to download anything. I declined again. They canceled the interview and blocked me. That’s when I started digging deeper. I subsequently found a previous security report describing an extremely similar Web3 podcast approach involving someone claiming to represent BeaconLayer and a supposed StreamYard link using: streamyard.host08eu[.]com Compare that with what I received: streamyard.host09us[.]com I also found malware-analysis records showing malicious executable samples have previously been signed under the same CODE LOFTS d.o.o. publisher name that appeared on my installer. To be clear: I did not install the file, so I cannot say exactly what the installer I received would have done. I also don’t know who currently controls the account or whether the account itself has been compromised. I’m sharing only what happened to me and what I subsequently found. But there were enough red flags that I’m extremely glad I trusted my instincts. The takeaway: A verified account, 100K+ followers, previous podcast episodes, professional communication and a legitimate-looking interview invitation are NOT enough reason to run unfamiliar software. Social engineering doesn’t always look like a scam. Sometimes everything looks legitimate until the very last click. Stay vigilant. 🔐