Jobseekers are being urged to stay alert as cybercriminals increasingly exploit online recruitment platforms to target people searching for new opportunities. Scammers are posing as genuine recruiters, conducting seemingly legitimate interviews and then tricking candidates into installing malicious software disguised as interview or assessment tools.
According to a BBC report, one jobseeker was approached on LinkedIn by a fake recruiter and taken through what appeared to be a genuine hiring process. After a video interview, he was asked to complete a technical assessment using a Google Sheets document. However, the document contained malicious software, which ultimately gave hackers access to his cryptocurrency wallets. Within hours, £18,000 of his savings had been stolen.
The victim, who chose to remain anonymous, had recently resigned from his job and had publicly indicated on LinkedIn that he was looking for new employment. The fake recruiter used this information to approach him with what appeared to be an attractive job opportunity.
The recruitment process seemed convincing. The candidate participated in a video call and was subsequently given what appeared to be a routine technical assignment. Unaware that the document had been weaponised, he completed the task before going to bed.
By the time he woke up, his online wallets had been emptied.
The victim said the experience left him emotionally and mentally exhausted. He described feeling disbelief, anger and confusion after discovering that his savings had been stolen.
Scammers exploiting jobseekers
Cybersecurity researchers say these recruitment scams are becoming increasingly sophisticated and can be difficult to distinguish from legitimate hiring processes.
Researchers from Have I Been Squatted, who analysed the attack, said the victim was not dealing with an obviously suspicious email or poorly designed website. Instead, the entire process appeared authentic, including legitimate-looking Google pages, a genuine Google login and software that was digitally signed, making it appear trustworthy.
Similar scams have also been reported through Indeed, with criminals using fake interview applications to infect victims’ devices.
Cybersecurity firm Malwarebytes has warned about malicious applications promoted under names such as fake Indeed Interview and MyInterview. Fraudsters may tell candidates that they need to install an application to complete an interview or access information about a salary agreement.
Once installed, these malicious applications can potentially give criminals access to sensitive information and enable financial theft or other forms of cybercrime.
What jobseekers should watch out for
Indeed has clarified that interviews conducted through its platform take place entirely within a browser and do not require candidates to download a separate application.
Experts advise jobseekers to independently verify recruiters and companies before proceeding with an interview. Candidates should also be particularly cautious if they are suddenly asked to install unfamiliar software, open unexpected files or provide sensitive information as part of a recruitment process.
As competition for jobs intensifies, scammers are increasingly exploiting the urgency and excitement surrounding employment opportunities. A seemingly perfect job offer, however, could come with a hidden cost.
