Job hunting is already stressful enough without scammers trying to exploit you. Unfortunately, emotional vulnerability is precisely what cybercriminals use to trick people into doing what they want. Such is the case of one scam that offers you a job and leaves with you a cryptojacker.
This Fake Job Offer Email Installs Malware on Your System
As reported by Dark Reading, a new scam is making the rounds. In this attack, the scammer will create a fake job offer and send it to potential victims. At the time of writing, the scammer impersonates the legitimate business CrowdStrike, but they could theoretically impersonate any company.
In the attack, the email claims that the sender wishes to offer you a position in the company. However, you’ll need to attend an interview before you’re accepted. The scammer includes a link that they claim will take you to a service where you can schedule your interview.
If you click on the link, you’ll be taken to a website that asks you to download a CRM application to continue. If you download and run the executable, it performs a few checks to see if it can install malware on your PC without detection. If these checks pass, the executable shows a fake error message, claiming something went wrong. It will then secretly install a cryptojacker that uses your computer’s resources to earn cryptocurrency for the scammer.
Fortunately, there’s plenty you can do to avoid scams like these. The first thing to remember is that job offers that come out of the blue are usually scams. Scammers often pretend to be famous businesses and offer lucrative roles to convince you to apply, but always treat them with a pinch of salt, especially if you haven’t advertised that you’re looking for work.
It’s also worth remembering that some unscrupulous scammers will make fake job offers and attack everyone who applies. If you’re currently on the job hunt, be sure to check out how to identify and avoid job posting scams to keep yourself safe.
