Recently, cybercriminal groups in Vietnam have been targeting individuals by sharing fake job postings. According to WithSecure experts, these groups are primarily targeting the digital marketing sector and Facebook business accounts. These fake job postings are used to spread known malware such as DarkGate and Ducktail.
In this scam, cybercriminals use LinkedIn messenger to send you a link to a fake job description. If you click on the link, you’ll be sent to an unsafe website that will lead you to malware-infected Google Drive files. If you download these files, the cybercriminals can gain access to your internet browser’s cookies and session data. This information helps them steal your login credentials and other sensitive information.
Follow the tips below to stay safe from similar scams:
- Be suspicious of unexpected LinkedIn messages, especially those with job offers from unfamiliar sources.
- Confirm that the person you’re speaking to is actually who they say they are. Look up the organization on official websites to verify job offers.
- Be cautious of offers that seem too good to be true. Cybercriminals will use unrealistic job offers to lure you into fake websites to access your sensitive information.