Jobseekers Warned of Scams Targeting Job Listings

Jobseekers are being warned to remain vigilant as scammers are targeting individuals on job listing websites to trick them into downloading fraudulent interview tools. One victim was approached on LinkedIn by a fake recruiter and downloaded a document that appeared normal but contained malicious software. Within hours, the hackers drained his cryptocurrency accounts of £18,000 in savings. The victim, who wished to remain anonymous, described the experience as a horrible feeling, stating, "It's a horrible feeling to be out a substantial amount - something I wouldn't wish on my worst enemy." Professional recruitment platforms LinkedIn and Indeed have issued warnings about the increasing number of job scams in recent months. LinkedIn released data indicating that younger professionals face the highest exposure to scams, with 32% admitting to ignoring red flags due to a competitive job market. When contacted by the BBC, LinkedIn stated that many young people feel they cannot afford to be skeptical in a crowded job market. The platform provided advice on its website about how to identify recruitment scams, such as verifying the legitimacy of the company and conducting thorough research before engaging in discussions. The victim who lost their savings had resigned from their previous job and indicated on LinkedIn that they were seeking new opportunities. A fake recruiter sent a potential job offer and conducted a video call before instructing the victim to complete a technical assessment via a Google Sheet document, which was infected with malicious software. After completing the task, the victim discovered their online wallets had been emptied. The victim expressed feelings of disbelief and anger towards the hackers and themselves, stating, "I felt a mixture of disbelief and anger - at the hackers and at myself. I was also confused until I figured out how they had got me." Cyber-security researcher Charlie Kelly from Have I Been Squatted analyzed the attack and noted that the new wave of recruitment scams are difficult to detect. He explained that the process was sophisticated, involving a seemingly legitimate job interview on real Google pages and a digitally signed software installation. The case follows reports of similar attacks through the job listing platform Indeed, which issued advice in July on how to avoid scams. Criminals are exploiting the pressure and excitement of job interviews to entice individuals into downloading compromised mobile applications, such as a fake Indeed Interview app or one called MyInterview. According to cyber-security company Malwarebytes, fake recruiters use tactics like urging candidates to "complete your interview by installing the Indeed app" or promising a "salary agreement available after app installation." Once downloaded, these malicious apps grant hackers access to private data for extortion or financial attacks. Malwarebytes emphasized that interviewing through Indeed's platform occurs entirely in a browser and does not require downloading a special app, warning that any request for job seekers to download an app for interviews is illegitimate.