You're hired! Kaspersky warns of a new dream job scam targeting victims on LinkedIn

Cybercriminals posing as HR managers from high end fashion brands are luring victims to download fraudulent files with the intent to steal credentials for Facebook Business accounts and run ads for monetary gain. People working in the field of digital marketing and sales are prime targets for this scam. As a first step, the scammers proactively contact victims on LinkedIn, highlighting a lucrative salary package for a job role. After gauging the victim’s interest, the scammers share a malicious link and persuade candidates to download documents related to the job from a cloud storage platform to successfully meet their objective. Upon investigating the malicious files, Kaspersky experts found that scammers were using a malware named Ducktail to infiltrate devices. Ducktail is designed to steal user logins and passwords for Facebook Business accounts and uses stealthy techniques to remain undetected. The scam is not exclusive to the UAE, with detections in Turkey, Iraq, and Lebanon. Sharing her experience to warn people of this ongoing scam, Hiba Safadi, Marketing Manager from the UAE, said, “When the recruiter contacted me, I was intrigued. To know if he was genuine, I checked his LinkedIn profile, which seemed authentic because it had a picture, testimonies
Read More