Scammers Fake Job Offers to Phish Personal Data from Job Seekers

Scammers fake job offers to trick job seekers into revealing sensitive personal information. These schemes impersonate big names like Nvidia, Glassdoor, RedBull, and Marriott. Researchers at Fortra recently uncovered a sophisticated phishing campaign targeting hopeful candidates with fake job opportunities.

How the Scam Works

The scammers send emails posing as recruiters from well-known companies. They lure victims with job offers tailored to their skills. The emails include convincing language and personalized details to build trust.

Victims are then directed to fake websites. These sites ask for a wide range of personal data, from contact information to login credentials. Once submitted, the scammers steal this data to commit fraud or identity theft.

Fortra’s Fire team warns that hundreds of phishing attempts exploit legitimate domains and use realistic branding. Many job seekers find these emails almost impossible to spot as scams.

Exploiting Trust in Big Brands

The scammers carefully imitate recognized companies. For example, they send emails that appear to come from Marriott or Nvidia. Personalizing the message with the recipient’s name increases the chance they’ll click on malicious links.

The fake emails often ask victims to schedule a call using popular tools like Calendly. To finalize the booking, the victim must enter their Google or Facebook credentials. This step allows attackers to hijack their accounts.

Sometimes the scammers use temporary staffing firm Adecco as a lure. The process leads victims to fake Google sign-in pages hosted on recently registered domains.

How to Protect Yourself and Your Organization

Job seekers should be cautious of unsolicited job offers. Never enter personal or login details on suspicious websites. Verify job offers through official company channels.

Businesses must train employees about phishing and social engineering threats. Strong password policies and multi-factor authentication help reduce risks. Security teams should monitor email systems and provide clear ways to report suspicious messages.

Conclusion

Scammers fake job offers to exploit job seekers and steal their data. These attacks are growing in sophistication, making vigilance essential. Awareness, training, and strong security measures can protect individuals and organizations from these threats.