Fake job offers on LinkedIn have a way to steal login credentials is through alleged high-paying “job offers” that require only a direct message to apply. When you arrive unexpectedly, we may be tempted to ask for more information. This will lead the fake recruiter to reply with a message in which he can request payment of a fee in advance, possibly for training, or ask the data subject to submit personal information through, for example, a Google Form. . Although the offer sounds a bit strange, the victim may think that there is nothing to lose, but they are wrong.
These offers often ask for additional personal information on first contact, even if this information was provided on your LinkedIn profile and resume, such as your name, age of residence, and contact details. In these situations, we always recommend confirming that the company you are applying to really exists and doing a quick Google search to verify it. And just like we put a lot of effort into writing and submitting a good resume, employers tend to pay attention to the job description they post, so if you notice grammatical errors or any conflicting information in these job communications, it may that you are facing a deception. Also, remember that no company is going to offer you money or ask for your bank details at the first contact.
It is worth mentioning that the scope of a fake job offer goes beyond stealing money or credentials from the victim. We have seen examples of sophisticated spy groups using fake job postings on LinkedIn to gain initial compromise to an organization to trick insiders and ultimately convince them to download a malware-infected file.
