# Malicious interview apps targeting job seekers

> Live situation record from CLSTR: https://clstr.news/situations/malicious-interview-apps-targeting-job-seekers
> Updated: 2026-09-15T17:25:33.000Z. Sources: 13. Developments: 2.

Cybercriminals are targeting job seekers through fraudulent Android applications designed to install spyware. These malicious APK files, such as “MyInterview”, are presented to applicants under the guise of completing interviews, verifying identities, or accessing salary agreements on platforms like Indeed.

Technical analysis indicates these apps function as Trojan droppers. They impersonate legitimate login pages to steal credentials and establish VPN connections. Once users grant the apps Accessibility permissions, the malware can take control of the mobile device and prevent uninstallation by forcing the screen back during the process.

Reports of these activities have emerged from users in the UK and Brazil. More recent observations note that these technical schemes are occurring alongside broader social engineering trends, where criminal networks use structured training to impersonate authorities such as police or doctors to manipulate victims.

In September 2026, the use of the “MyInterview” Android malware was identified as part of a wider wave of cyberattacks and phishing scams targeting consumers in Germany and Austria. This broader criminal activity includes impersonating financial institutions like Sparkasse and Volksbanken Raiffeisenbanken, as well as service providers such as Asfinag and Deutsche Telekom, to steal sensitive personal and financial data.

## Timeline

### 2026-09-15: Cybercrime wave targets banks and services in Germany and Austria

Cybercriminals are launching diverse phishing and malware attacks in Germany and Austria, impersonating banks, telecommunications providers, and government services to steal data and funds.

9 sources. https://clstr.news/cluster/cybercriminals-use-professional-training-and-fake-apps-for-fraud

### 2026-08-26: Indeed job seekers targeted by fake interview apps installing spyware

Scammers are using fake Android interview apps to target Indeed job seekers, using Trojan droppers to install spyware and gain device control via Accessibility permissions.

5 sources. https://clstr.news/cluster/indeed-job-seekers-targeted-by-fake-interview-apps-installing-spyware

---
Cite as: Malicious interview apps targeting job seekers. CLSTR, https://clstr.news/situations/malicious-interview-apps-targeting-job-seekers