MalwareTips: join.meetclave.com fake interview portal pushes camera-fix malware
MalwareTips, citing Trend Micro, says fake recruiters send applicants to join.meetclave.com, where a camera-fix command installs malware. CoFoundersLab and Telegram are not involved.
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips published an investigation on 6 November 2026 of the Meetclave interview scam, naming the supposed interview portal at join[.]meetclave[.]com. It draws on research by Trend Micro, which documented a recruiting lure that began with job listings on CoFoundersLab for roles including hiring assistance and investor-facing work, then moved applicants to Telegram and to the Meetclave portal. CoFoundersLab and Telegram are legitimate services and are not involved.
How the scam works
The portal resembles a meeting lobby, with meeting details and access codes. It then displays a camera and microphone error and offers a copied repair command, guiding the applicant to run it through Windows. Trend Micro researchers described that command as downloading and launching malware with information-stealing or remote-access capabilities, although the published account did not identify a single confirmed malware family. MalwareTips stresses that a warning drawn inside a webpage is not a Windows diagnosis, and that pasting a website's command into a terminal gives it access an ordinary webpage would not have.
The lure works because job seekers expect messages and calls, and a modest role on a familiar platform does not seem extravagant. Moving to private messaging makes it easier to give personalised instructions, and the urgency of a scheduled interview distracts from checking whether the recruiter is real.
MalwareTips' guidance depends on what happened. If you only opened the invitation, stop and verify the employer through contact details you find yourself. If you copied the fix, do not paste it anywhere and replace the clipboard contents. If you ran the command, treat the computer as potentially compromised: disconnect it, change passwords from a clean device and run a full security scan. On a work device, contact your security team before deleting anything.
Source
MalwareTips investigation, 6 November 2026: https://malwaretips.com/blogs/meetclave-interview-camera-fix-scam/
Red flags
- A recruiter who moves the conversation from a job site to Telegram.
- An interview link on an unfamiliar domain such as join.meetclave.com.
- A camera or microphone error that offers a command to copy and run.
- Instructions to open the Windows Run box, PowerShell or a terminal to fix a meeting.
- Interview steps that never reach a real conversation.
If you were targeted
- 1Never paste commands from a website or recruiter into Run, PowerShell or a terminal.
- 2Verify recruiters through the company's official careers page or phone number.
- 3Use well-known meeting apps you already have rather than unfamiliar portals.
- 4If you ran the command, disconnect the computer, change passwords from another device and scan for malware.
- 5On a work device, contact your IT or security team immediately.