Fake Web3 Interview Uses Signed ClickOnce to Deploy NeedleStealer and hVNC RAT