📝 Show notes
CyberAware Daily — 2026-11-05
- Case File: the fake job interview scam, and how it moves from trust-building to malware
- How scammers use fake recruiters, company websites and video interviews to look genuine
- The moment they ask you to install software or run a script — that's the trap
- How to verify a recruiter independently, using a phone number you look up yourself
- What to do if you've already installed something: disconnect, scan, change passwords from another device, call your bank
- Report suspected job scams to Action Fraud
More at https://cyberawareuk.co.uk
📄 Full transcript
Welcome back to Cyber Aware UK. It's Thursday, which means it's case file day, where we walk
through a real scam so you know exactly what to look for. And today's case is a good one
or a bad one depending how you look at it. It's the fake job interview. How does that one actually
work? Right, so picture it. Your job hunting. You get a message on LinkedIn or WhatsApp from
someone claiming to be a recruiter. They've got a role, the money's good, and they want to interview
you. And this isn't a quick phone call, is it? From what I've seen, they put real effort in.
They do. You get a proper video interview. There's a fake company website. Sometimes there's even a
fake HR person on the call with their camera on. So when does the tech bit come in? Because at this
point it just sounds like a job. That's the whole trick. The tech bit comes after they've built your
trust. They tell you the next stage is a technical task, and to complete it, you need to install some
software or run a script they've sent. And that software is the trap? Exactly. It looks like a
legitimate developer tool or a test environment. What it's really doing is giving the scammers a way
into your machine, and from there into your crypto wallets or your bank. Now the Binance case earlier
this year was the headline version of this, billions of dollars. But our listeners aren't all crypto
exchanges. Right, and that's the point. The same playbook gets used on ordinary people. A fake recruiter
offers you a work-from-home job, then asks you to install a company app before your first day.
What should someone do if they think they're in the middle of one of these right now?
Stop and check. Look up the company independently, not through the link they sent. Ring the number on
the company's real website and ask if that recruiter works there. And if the answer is no.
Then you've had a lucky escape. Don't install anything else, don't send any documents,
and report it to action fraud. What about people who have already installed the software?
Disconnect from the internet, run a full antivirus scan, and change your passwords from a different
device. If money's moved, call your bank straight away. The faster you call, the better the chance
of stopping it. So the takeaway for today?
Never install software for a job you haven't verified. Always ring the company on a number
you found yourself, not one the recruiter gave you. That one habit breaks this scam.