Case File: The Fake Job Interview That Ends in Malware
Every Thursday on CyberAware UK we open the case file on a real scam. This week it's the fake job interview — a scam that has been used to steal enormous sums, but which follows the same pattern whether the target is a crypto firm or someone looking for their first office job.
How it starts
You're job hunting. A message arrives on LinkedIn or WhatsApp from someone claiming to be a recruiter. The role sounds good, the pay is attractive, and they want to interview you quickly.
The interview is where the scam earns its keep. There's a video call, sometimes with a fake HR representative. There's a company website that looks real. All of this is designed to make you trust the person on the other end.
The moment it turns
After the interview, the recruiter says the next stage is a technical task. To complete it, you need to install some software or run a script they've sent over.
That software is the trap. It looks like a legitimate developer tool or test environment, but it gives the scammer access to your computer — and from there, to your bank accounts or crypto wallets.
How to protect yourself
- Verify the recruiter independently. Don't use the link or phone number they gave you. Go to the company's real website, find their contact details, and call to ask whether that person works there.
- Never install software for a job you haven't verified.
- Be wary of any interview process that moves very fast, or that asks you to run scripts on your own device before you've even signed a contract.
If you've already installed something
Disconnect from the internet, run a full antivirus scan, and change your passwords from a different device. If money has moved, call your bank straight away. Report the scam to Action Fraud.
The takeaway: no legitimate employer needs you to install unknown software before you've even been hired. Check first, then act.
Related reading