'I thought it was a job interview' — one file download cost a victim $23,000

A "fake job interview" scam is spreading among desperate job seekers, with fraudsters posing as recruiters on LinkedIn and Indeed to trick applicants into downloading malware through interview tasks or dedicated apps, the BBC reported Friday (local time).

According to the broadcaster, one victim received an interview offer through LinkedIn from a fake recruiter, then downloaded what appeared to be an ordinary document — only to be hacked. The victim went through what seemed like a real hiring process, including a video call, before following instructions on a Google Sheet to complete a technical assessment. The document, however, contained hidden malware.

While the victim slept after finishing the task, hackers accessed his cryptocurrency account and stole 18,000 pounds ($23,000).

"Losing money is a terrible feeling," the victim told the BBC. "I wouldn't wish this on my worst enemy. I wiped my computer and changed all my passwords. I am completely worn out — mentally and emotionally."

In practice, LinkedIn data shows that 32 percent of young workers have been exposed to job-related scams. "The job market is so competitive that many young people feel there are too few opportunities, and they don't think they can afford to be suspicious," LinkedIn said.

Experts say recruitment scams have become far more sophisticated of late. Job seekers who receive an offer should verify that the company and the job posting actually exist, and confirm the recruiter's identity through the company's official website or email address. Particular caution is warranted if the interview or hiring process requires downloading a separate program or app.

Cybersecurity researcher Charlie Kelly said "this was not a poorly written email with a suspicious attachment. The victim went through what looked like a real interview on actual Google pages with a real login environment, and the software they were told to install even carried a digital signature that made it look like a legitimate app."

Similar scams have been reported on Indeed. Criminals have been directing job seekers to install a fake app called "MyInterview," then hacking their accounts to steal money. Once installed, such apps give hackers access to personal and financial information stored on the device, which can then be exploited for blackmail or financial fraud.

"All interviews on the Indeed platform take place within a browser, and there is no need to download a separate dedicated app," Indeed warned. "Any message asking you to install an app to participate in an interview is not a legitimate request."

yckim6452@heraldcorp.com