As the job market worsens, cybercriminals are preying on job seekers

With unemployment rising, scammers are exploiting desperation to lure victims into fake job sites and phishing traps.

Fake job sites are multiplying

DNSFilter detected over 8,700 malicious domains containing “jobs” and more than 1,100 with “careers,” most of them newly registered.

A perfect storm for scams

High unemployment and sluggish hiring make job seekers especially vulnerable to fraud, says Gregg Jones, intelligence lead at DNSFilter.

The wolf and the sheep

“The economy is not so great… people are struggling to find jobs,” Jones said. “Where’s the good sheep for the wolf to go attack?”

Cybercriminals cast a wider net

Threat groups aren’t just preying on applicants — hiring managers are also being targeted through malicious résumés and fake profiles.

Deepfake job seekers

Recruiters are reporting a surge in fake IT worker schemes made more convincing by AI-generated photos and deepfake video calls.

Malware hidden in résumés

Security firm Arctic Wolf found a campaign where attackers sent malware-laced résumés to infect HR systems.

How the scams work

Fake job listings direct victims to spoofed company websites that mimic legitimate portals, then harvest personal and financial data.

What to watch for

DNSFilter warns against clicking on links with “excessive hyphens or strange extensions” and urges applicants to verify site domains.

Too good to be true

Experts say unrealistic salaries, instant hiring promises, or job offers that skip interviews are red flags for fraudulent schemes.

Verify before you click

Jones advises contacting the company or recruiter directly if something feels off — “No one should ever chastise you for being extra careful.”

Stay alert in tough times

With layoffs continuing and desperation high, cybersecurity experts warn: if the offer sounds perfect, it’s probably a trap.

This article is made and published by Asger Risom, who may have used AI in the preparation