Victims are invited to an interview on the Willo platform, where they are asked questions about the crypto market and asked to record a video response. During this process, an error occurs that requires updating the microphone and camera drivers and restarting the browser. Following the instructions, users install a backdoor. The attack affects macOS, Windows and Linux operating systems.