Indeed job seekers targeted by fake interview apps installing spyware

Scammers are using fraudulent Android “interview” applications to target job seekers on the Indeed platform. These malicious apps are designed to install spyware and compromise mobile devices.

Reports from users in the UK and Brazil, along with discussions on Reddit, indicate that scammers lure applicants by instructing them to install specific APK files, such as “MyInterview,” under the guise of completing an interview, verifying identity, or accessing salary agreements.

Technical analysis by Malwarebytes reveals that these apps impersonate Indeed’s login page to steal credentials and establish VPN connections. Identified as Trojan droppers, the apps can install additional untrusted software. Once granted Accessibility permissions, the malware can effectively take control of the device and prevent users from uninstalling the application by forcing the screen back during the uninstallation process.