A job seeker who was seeking a new role on LinkedIn fell victim to a sophisticated scam that saw hackers siphon £18,000 from his cryptocurrency wallets within hours of a seemingly normal interview assessment.
The victim received a message from a fake recruiter who invited him to a video call and then sent a Google Sheet containing a technical test. The sheet contained a file that, when opened, installed malware that gave attackers access to the victim’s online wallets.
After the assessment, the candidate went home and woke to find his savings gone. "I wiped my computer and changed all my passwords and was emotionally and mentally drained," he said, adding that he felt a mix of disbelief, anger and confusion.
LinkedIn and Indeed have both warned of a surge in job‑listing scams, with LinkedIn noting a “Gen Z Scam Gap” where 32 % of younger professionals admit to ignoring red flags. The platforms urge users to verify company details and avoid downloading any app or file during an interview.
Cyber‑security researcher Charlie Kelly explained that the attack was hard to spot because the malicious software was digitally signed and appeared to come from a legitimate Google page. He noted that the new wave of scams uses realistic interview scenarios to lure candidates.
Malwarebytes added that fake recruiters often lure users with messages such as “Complete your interview by installing the Indeed app” or “salary agreement available after app installation.” The company stressed that Indeed interviews occur entirely in a browser and never require a separate app.
Job seekers are advised to stay vigilant, verify recruiter identities, and avoid downloading any software or files during an interview process.
