Skip to main content

Command Palette

Search for a command to run...

Recognizing Job Scams: Protecting Major Companies from Fraud

Updated
4 min read
Recognizing Job Scams: Protecting Major Companies from Fraud

Recently, the impersonation of large, reputable businesses to commit fraud and seize assets on social platforms has become increasingly sophisticated, with fake documents deceiving many unsuspecting people into falling for scams...

Details

Fraud schemes are becoming more sophisticated, with perpetrators impersonating major brands to deceive job seekers. They often create fake websites and social media pages of large companies, then post fake job listings and ask victims to transfer deposits or recruitment fees. They also collect personal information from victims for various malicious purposes.

Some actual scams recorded:

Impersonating Unilever Vietnam for recruitment and money fraud

  • The scammer impersonated the Head of Labor Relations at Unilever Vietnam.

  • Method:

    • Created fake accounts on TikTok

    • Created a fake company website

    • Posted recruitment and labor export brokerage information

  • Then the scammers carried out:

    1. Posted recruitment information on personal pages

    2. Created a fake website to build credibility

    3. Sent an online registration form "Apply for office support staff" to candidates

    4. Asked candidates to pay money

    5. Faked receipts with the company's signature and stamp

Consequence: candidates transferred money, received fake receipts, and waited in vain

  • Case of impersonating Masan Group for fraud:

    The scammer posted a recruitment ad for a Sales Manager position on social media.

  • Method:

    • Used Microsoft Teams software for online interviews to build trust

    • Added candidates on Zalo

  • Fraud process:

    1. Conducted an online preliminary interview round via Microsoft Teams

    2. Collected personal data from candidates

    3. Added candidates on Zalo and introduced the company, culture, and projects

    4. Mentioned a collaboration project between Ho Chi Minh City Lottery and Masan

    5. Asked candidates to pay for "social welfare project packages"

  • Sophisticated tricks:

    • During the interview, many people participated, with 1-2 posing as other candidates

    • These people acted friendly, probed psychology, and encouraged investment participation

    • Used a fake website (https://kienthietphucloi)

  • Consequence: Victims transferred money and received no response after 3 days

  • Case of impersonating SGR Group for fraudulent recruitment.

Impersonation Method

Created a website, fan page, and email account with a domain similar to Sun Group Recruitment:

  • Fake website: sungroupjob.com

  • Fake fan page: https://www.facebook.com/profile.php?id=61563827971277 (OFFICIAL FAN PAGE HAS 54K LIKES)

  • Fake email: tuyendung@sungroupjob.com

  • Ran ads for fake recruitment posters with various positions

  • Invited candidates to participate in preliminary selection and discussions via the Lotus Chat app

  • Asked candidates to take a test through a fake form https://bom.so/C4lVaC

  • Required candidates to create an account and pay a fee to join the Welfare – Social Project

Common Features of Phishing Attacks

  • Highly sophisticated with detailed scripts.

  • Create websites, fan pages, and email accounts with domains similar to those of large companies' recruitment.

  • Use tools like Lotus Chat and Microsoft Teams to build trust.

  • Involve many people to create psychological pressure.

Additionally, here are some common sophisticated scams today:

Impersonating Bank Employees:

Method: Scammers pretend to be bank employees, convincing people to open credit cards for special offers.

Purpose: To collect personal information and gain control of credit cards to steal money.

Scam Technique: This scam targets people's trust in reputable financial institutions.

Impersonating Government Officials:

Method: Scammers pose as police officers, customs officials, traffic police, etc.

Purpose: To trick people into downloading apps with malware, sell seized vehicles, and steal money.

Scam Technique: They exploit the credibility of government agencies to gain trust and pressure victims.

E-commerce Scams:

Method: Scammers impersonate e-commerce platforms, tricking people into completing fake orders, selling fake tickets, or fake job recruitment.

Purpose: To steal deposits and money for tasks.

Scam Technique: They take advantage of the online shopping trend and people's desire to earn extra income.

Investment Scams:

Method: Inviting people to invest in cryptocurrencies, virtual gold, forex, or stocks.

Purpose: To steal the victim's investment money.

Scam Technique: Exploiting people's lack of financial knowledge and their desire to get rich quickly.

Immigration Scams:

Method: Advertising jobs abroad with attractive salaries.

Purpose: To scam money for processing fees or to smuggle people illegally.

Scam Technique: Taking advantage of people's desire to find high-paying jobs overseas.

Romance Scams:

Method: Pretending to be a foreigner and forming a romantic relationship.

Purpose: To scam money or extort the victim.

Scam Technique: Exploiting the victim's emotional needs and trust.

Superstition and Charity Scams:

Method: Pretending to be someone who gives lottery numbers or calls for fake charity donations.

Purpose: To steal money through fees or charity donations.

Scam Technique: Exploiting people's religious beliefs, superstitions, and generosity.

Recommendations:

  • These scams are becoming more sophisticated, varied, and are frequently updated to exploit new social trends. It's important for people to stay alert and carefully verify information before engaging in any transactions, especially online or with strangers.

  • Job seekers should contact companies directly through official channels.

  • Businesses should promptly issue warnings if they are impersonated.

  • It's crucial to carefully check information from official company sources.

References

  1. "Mượn danh" doanh nghiệp lớn để lừa đảo tuyển dụng qua mạng xã hội<https://vneconomy.vn/muon-danh-doanh-nghiep-lon-de-lua-dao-tuyen-dung-qua-mang-xa-hoi.htm>

  2. Công an Hà Nam: Thông báo phương thức, thủ đoạn hoạt động của tội phạm lừa đảo chiếm đoạt tài sản trên không gian mạng <https://congan.hanam.gov.vn/index.php/vi/news/canh-bao-toi-pham/cong-an-ha-nam-thong-bao-phuong-thuc-thu-doan-hoat-dong-cua-toi-pham-lua-dao-chiem-doat-tai-san-tren-khong-gian-mang-2908.html>

Newsletters-eng

Part 1 of 50

More from this blog

F

FPT IS Security

761 posts

Dedicated to providing insightful articles on cybersecurity threat intelligence, aimed at empowering individuals and organizations to navigate the digital landscape safely.