Loading story…
Job-related scams have experienced a dramatic increase, with research from McAfee indicating a surge of over 1,000% between May and July 2025. Job seekers are particularly vulnerable, as they are more likely to receive unsolicited messages and may overlook warning signs, making them prime targets for scammers. These scams often involve fraudulent recruiters who lead with enticing benefit details or request sensitive personal information early in the communication process. In addition to job scams, there has been a significant rise in text message-based phishing attacks, known as smishing, which disproportionately target younger Americans aged 18 to 29. According to a report by Consumer Reports, Aspen Digital, and the Global Cyber Alliance, 30% of individuals who experienced a cyberattack or scam in the past year reported that it began via text message or messaging app, up from 20% the previous year. Phishing remains the most prevalent type of scam, with 39% of victims reporting that the attack involved messages or emails impersonating legitimate sources to solicit personal information. Nearly half of American consumers have encountered a cyberattack or digital scam, and about 1 in 10 Americans overall have lost money as a result. Scammers are systematically targeting essential aspects of modern life, including job hunting, online shopping, financial management, and technology adoption. The success of these scams often relies on exploiting victims' emotions, urgency, and distraction, rather than technical sophistication. Security experts emphasize the importance of awareness and education as critical defenses against social engineering attacks. Best practices such as using strong passwords, enabling multi-factor authentication, and verifying communications through official channels are recommended to mitigate risk. AI-powered security awareness training is highlighted as an effective tool for organizations to reduce human risk and strengthen security culture. The reports stress that collective action is necessary, involving individuals making safer choices, industry developing more secure products, and governments holding cybercriminals accountable. The dramatic increase in scams underscores the need for ongoing vigilance and proactive security measures. Both job seekers and younger demographics are urged to be especially cautious when responding to unsolicited messages or offers. The data suggests that as digital communication channels proliferate, so too do the opportunities for scammers to exploit unsuspecting users. Security vendors and advocacy groups continue to provide guidance and resources to help the public recognize and avoid these evolving threats. The overall trend points to a rapidly escalating threat landscape that requires coordinated efforts from all stakeholders to address effectively.
Get the infrastructure and lures behind it.
2 events from the most recent confirmed update back to the earliest known activity.
A separate KnowBe4 blog post reported a surge in text-message scams affecting younger Americans, pointing to increased scam activity through SMS-based lures. No specific underlying event date was given in the reference, so the publication date is used.
A KnowBe4 blog post reported that job scams had surged by more than 1000%, indicating a sharp escalation in employment-related fraud activity. No earlier incident date was provided in the reference, so the publication date is used as the event date.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A dramatic increase in banking and financial scams has been observed globally, with a 65% rise in scam activity over the past year, according to data from BioCatch. Financial institutions serving nearly 350 million consumers across five continents have reported explosive growth in various scam types, including a tenfold increase in SMS-based phishing (smishing) attacks. Voice phishing (vishing) attempts have doubled, romance scams have risen by 63%, and investment scams have climbed by 42%. Purchase scams remain the most common form of fraud, with a 14% increase in attempts. The Global Anti-Scam Alliance estimates that consumers now lose over $1 trillion annually to scams, a figure that continues to escalate. Much of this surge is attributed to organized criminal operations exploiting the financial system, as noted by the U.S. Department of the Treasury. Scammers are leveraging current events and government programs, such as New York State’s inflation refund initiative, to launch targeted phishing campaigns. These campaigns often impersonate official agencies, urging recipients to provide sensitive payment information under the threat of losing their refunds. The phishing messages typically originate from foreign numbers and direct victims to fake websites designed to harvest personal data, including Social Security Numbers and bank account details. In the private sector, attackers are targeting users of popular financial platforms like Robinhood, sending convincing text messages that warn of suspicious account activity and prompt users to log in via fraudulent links. These fake login pages are crafted to closely mimic legitimate sites, and after stealing credentials, some even redirect victims to the real site to avoid suspicion. Additionally, credential phishing campaigns are evolving rapidly, with scammers impersonating Google Careers to target Google Workspace and Microsoft 365 users. These emails, sent in multiple languages and using frequently changing sender details, lure recipients into multi-step traps involving fake verification pages and credential harvesting sites. Attackers abuse legitimate services such as Salesforce and Recruitee to distribute these phishing emails, and the malicious domains are often newly registered to evade detection. The sophistication and adaptability of these scams make them increasingly difficult for both individuals and organizations to detect and prevent. Financial institutions and cybersecurity experts emphasize the need for heightened vigilance, robust anti-phishing training, and advanced fraud detection technologies to combat this growing threat. The widespread nature of these scams underscores the importance of cross-sector collaboration and public awareness to mitigate financial losses and protect sensitive information. As scammers continue to refine their tactics, the risk to consumers and businesses remains high, necessitating ongoing adaptation of security measures. The convergence of social engineering, technical deception, and exploitation of current events highlights the evolving landscape of financial cybercrime. Authorities and industry leaders are calling for increased investment in behavioral biometrics and real-time fraud monitoring to stay ahead of these sophisticated threats. The ongoing battle against banking and financial phishing scams is expected to intensify as attackers leverage new technologies and social trends to expand their reach.
Jun 29, 2026
A surge in online job scams is posing significant risks not only to individuals but also to corporate networks. Attackers are impersonating recruiters and luring victims with fake job offers, prompting them to download malicious software disguised as interview tools or application materials. According to a recent Google advisory, these scams are increasingly embedding remote access Trojans and info-stealers, which can compromise both personal and enterprise devices, leading to credential theft, fraud, and unauthorized access to corporate systems. The Global Anti-Scam Alliance's 2025 report highlights the scale of the threat, with 57% of adults experiencing an online scam in the past year and 23% reporting financial losses. Security researchers warn that the consequences for victims include financial theft, identity fraud, and system compromise that enables further credential harvesting and infiltration of corporate networks. Enterprises are urged to address the risks posed by compromised personal devices and to implement robust fraud risk management strategies to mitigate these evolving threats.
Jun 29, 2026
Cybercriminals are increasingly exploiting the job search process to launch sophisticated social engineering attacks aimed at stealing credentials and compromising systems. In one widespread campaign, attackers send phishing emails that masquerade as job offers for Social Media Manager positions, leveraging the reputations of well-known brands such as KFC, Ferrari, and Red Bull to build trust with potential victims. These emails are often sent from legitimate-looking services like Google Workspace and Microsoft 365, making them harder to detect. Victims who click on the provided links are redirected through a series of deceptive web pages, including fake security checks and fraudulent job postings designed to mimic reputable sites like Glassdoor. The process culminates in a fake Facebook login page, where users are tricked into entering their credentials, which are then harvested by the attackers. Sublime Security researchers have identified telltale signs of these scams, such as suspicious URLs that appear to be associated with trusted brands but are actually redirects to malicious sites. The attackers use templates or large language models to generate convincing, varied phishing messages at scale, increasing the reach and effectiveness of their campaign. In a separate but thematically similar attack, developers are targeted on LinkedIn by a fake recruiter claiming to represent an AI-driven company called DLMind. The recruiter, using a well-crafted persona and a polished LinkedIn profile, invites victims to access a private GitHub repository under the pretense of a coding assessment. When the victim runs the provided setup script, a multi-stage malware payload is executed. This malware is designed to scan for sensitive files, steal browser credentials and cookies, hijack clipboard data, collect system information, and establish persistent remote access using tools like AnyDesk. The attack chain is carefully engineered to blend into a developer’s normal workflow, making detection difficult. Both campaigns demonstrate a trend of attackers weaponizing trust and exploiting the job-seeking process, using a combination of social engineering and technical sophistication to achieve their objectives. The impact of these attacks includes the theft of social media credentials, exposure of sensitive personal and professional data, and the potential for long-term system compromise. Security researchers emphasize the importance of vigilance when responding to unsolicited job offers, especially those that require logging in through unfamiliar portals or running code from unverified sources. Organizations are advised to educate employees about these tactics and implement technical controls to detect and block such phishing and malware delivery attempts. The use of legitimate platforms and convincing personas by attackers underscores the need for robust verification processes and heightened awareness among job seekers and professionals alike. These incidents highlight the evolving nature of social engineering threats and the critical importance of multi-layered defense strategies. The campaigns also illustrate how attackers are leveraging automation and AI to scale their operations and increase the sophistication of their lures. As the job market remains competitive, individuals and organizations must remain alert to the risks posed by these targeted attacks. Ongoing monitoring, user education, and rapid incident response are essential to mitigating the impact of such credential theft and system compromise campaigns.
Jul 8, 2026