[CLSTR]
< Back to situation

[REVISION HISTORY]

Recruitment and interview scams targeting jobseekers

Updated 3 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-20 02:04 UTC → 2026-09-26 20:18 UTC · added removed

Jobseekers are being targeted by sophisticated recruitment scams that utilize fake interview processes to deploy malicious software. These fraudulent schemes often begin on platforms like LinkedIn, where fake recruiters conduct realistic video interviews before directing candidates to complete technical assessments via compromised documents. Recent cybersecurity research has identified specific malware campaigns utilizing social engineering to compromise users. One operation, dubbed ‘Contagious Interview’ by Microsoft’s Defender Experts team, targets job seekers—often in the cryptocurrency sector—by guiding them through technical assessments that require cloning and executing code from repositories. In one documented case, a candidate lost £18,000 in cryptocurrency savings following a fraudulent assessment. Other campaigns employ weaponized Word documents containing fake credit card or passport details to trigger execution chains, using RTF objects to download obfuscated PowerShell scripts that deploy malware strains such as XWORM and AGENTTESLA via custom .NET loaders. Criminals AGENTTESLA. Authorities are increasingly using sophisticated fake job advertisements to steal personal data or facilitate money laundering. Technological advancements now warning of a surge in scams utilizing SMS, WhatsApp, and artificial intelligence allow fraudsters to create professional-looking social media. In Ghana, the Cyber Security Authority reported that criminals are cloning government websites and fake identities, making detection difficult. Common indicators include unusually high salaries impersonating senior officials to create a false sense of legitimacy, often targeting individuals who never applied for minimal experience, grammatical errors, positions. In the UK and immediate hiring Ireland, fraudulent offers that bypass standard procedures. are increasingly arriving via WhatsApp and calls using spoofed local mobile numbers. These tactics exploit the difficulty of finding secure employment to trick victims into submitting sensitive identity documents and banking information, leading to identity theft and unauthorized financial transactions. Experts warn note that even answering a major red flag is any request for payment for registration, training, or materials. Attackers primarily seek personal datasets scam call can confirm to open fraudulent bank accounts, secure loans, or establish fake business transactions in attackers that a victim's name. Job seekers are advised to verify email addresses, as scammers often use free webmail accounts or slightly altered domain names to mimic legitimate companies. number is active, resulting in increased targeting.

Versions

  1. 2026-09-26 20:18 UTC Recruitment and interview scams targeting jobseekers
  2. 2026-09-20 02:04 UTC Recruitment and interview scams targeting jobseekers
  3. 2026-09-17 08:23 UTC Recruitment and interview scams targeting jobseekers
  4. 2026-09-07 07:18 UTC Recruitment and interview scams targeting jobseekers

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.