If you are on different social work networks, such as Linkedin, and even if you have signed up for many job offers, you should know that there are “fake” job offers, so you should take extreme precautions. Generally, scams come from Phishing messages, which are more or less worked, but in job offers we can also “fall” into the trap, and provide bank details to steal money. If you want to know how to detect these “fake” job offers, you have all the details below.
In this article we are going to explain how to discover a fake job offer, and avoid the hell of uncertainty that comes to you, when you have given your information to someone who you do not know who is, but who you know is fraudulent. Because the Internet right now seems to be full of fake job offers, and we are going to help you in case you have already been involved in a situation like this, or to prevent you from “falling” into the trap in the future.
What are fake job offers?
False job offers, or “fake”, are fraudulent advertisements created to deceive people looking for employment. At first glance, they may seem legitimate, but behind those posts is a plan to collect personal or financial information from candidates, and in the worst case, install malicious software on their devices. These scams have become increasingly sophisticated, affecting not only individuals but also companies in sensitive sectors such as technology, defense and finance.
There are some fake job offers that only seek to collect personal data, such as name, surname, telephone number and email. However, in others they will ask us for even more information such as address, bank account to pay our payroll in the future, and even card details to make a small payment and thus be able to access a supposed interview.
How they work
The structure of these fraudulent offers follows similar patterns to social engineering attacks:
- Fake recruiters: Cybercriminals often present themselves as representatives of well-known companies. They use platforms such as LinkedIn or send personalized emails, including specific details of the candidate or their professional profile to gain their trust.
- Fake job pages: After capturing the victim’s attention, the next step is to redirect them to a website that simulates a job platform or the company’s own page. On these sites, the candidate is asked to fill out forms with personal and financial information.
- Downloading malicious files: In some cases, the candidate receives a file that supposedly contains information relevant to the selection process, such as a technical test. When you open this file, malware is installed on your computer, putting your data and that of the company you work for at risk.
Types of offers
There are various types of fake job offers, each with its own characteristics and techniques:
- Offers in critical sectors: cybercriminals such as the Lazarus group, known for their attacks in the defense and technology sectors, use this technique to access sensitive information of companies and their employees.
- Focused on software developers: Developers often receive these types of offers frequently. Cybercriminals ask them to download malicious software or access compromised links to obtain their access credentials.
- Cryptocurrency theft: In other cases, the goal is to steal cryptocurrency. Scammers have been reported to create job offers targeting professionals at cryptocurrency companies, taking advantage of the possibility of accessing their digital wallets.
Warning signs
To avoid falling for these scams, it is essential to pay attention to certain signs that indicate a possible fraudulent offer:
- Salaries or benefits too good to be true: If the offer promises high pay without requiring much experience or knowledge, it is likely false.
- Informal selection process: If they offer you the position without a formal interview or ask you for money to continue in the process, it is a big alert.
- Generic domain emails: serious companies use corporate emails. If the contact comes from a free domain like Gmail or Yahoo, be wary.
- Requests for sensitive personal data: no company will ask you for your bank account number, ID or similar information in the early stages of the selection.
- Requiring file or app downloads: Be wary of any offer that asks you to install or download software on your device to complete the process.
How to protect yourself
Avoiding these frauds is possible by following some basic tips:
- Always research the company: before submitting any information, make sure the company is real. Check the offer on its official website or check opinions on social networks.
- Keep your devices up to date: Make sure your devices have a good antivirus and are up to date on security updates.
- Be wary of payment requests: no legitimate company will ask you for money to continue in a selection process.
- Use a VPN when looking for a job: This service encrypts your connection and protects your information when you connect from public networks, which can be useful in remote work environments.
Fake job offers are not only frustrating, but can also lead to serious security issues and data loss. Therefore, in these times where fraud is the order of the day, being cautious is the best tool.