Loading story…
Organizations are facing growing security risks in hiring as candidates use large language models, automated application tools, and AI-generated resumes and interview responses to game recruiting workflows. Recruiters are responding with AI-based sourcing, screening, and pre-screening systems, but the escalating use of automation on both sides is increasing low-quality applicant volume, amplifying bias concerns, and weakening trust in hiring decisions.
The most serious concern is the rise of fraudulent applicants using deepfake identities and stolen or fabricated personas to pass interviews and verification checks, potentially gaining access to corporate systems as insiders. Reported examples include a suspected deepfake candidate exposed through a live prompt and an applicant who allegedly used another person’s LinkedIn identity to secure an interview; recommended defenses include human-led interviews, liveness checks, spontaneous skills testing, transparent AI-use policies, and multi-step identity verification to reduce the risk of data theft, intellectual property loss, or malware deployment after hiring.
Get the infrastructure and lures behind it.
1 reference tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations are facing a growing threat from job applicants who use deepfake technology, AI-generated resumes, and impersonation tactics to infiltrate hiring pipelines. Attackers are leveraging advanced tools to create convincing fake identities, outsource interviews, and submit highly polished resumes that can evade traditional screening methods. This trend has escalated beyond simple resume exaggeration, posing a significant security risk as malicious actors attempt to gain unauthorized access to corporate environments through fraudulent employment. Security experts and companies, including Malwarebytes, have observed waves of nearly identical resumes, AI-generated profiles, and applicants whose credentials fall apart under scrutiny. These tactics often involve the use of stolen or AI-generated profile photos, fake contact information, and coordinated efforts to bypass HR checks. The rise of such sophisticated applicant fraud highlights the urgent need for organizations to adapt their hiring and verification processes to counter these evolving threats and prevent potential insider risks.
Jun 29, 2026
Multiple reports highlighted a surge in **AI-enabled social engineering** that blends convincing pretexts with increasingly effective lures to steal credentials, money, or sensitive data. One account described a near-miss **LinkedIn job/recruiter scam** in which an attacker impersonated a recruiter tied to a well-known tech brand and attempted to draw the target into a fraudulent hiring/workflow process, illustrating how professional networking platforms are being used to seed high-trust approaches and extract personal information. Separately, threat reporting cited a sharp rise in **fake CAPTCHA** lures—up **563% over 2025** per *CrowdStrike’s 2026 Global Threat Report*—as attackers shift away from older “malicious browser update” prompts toward CAPTCHA-themed interactions that can trick users into executing malicious steps or handing over access. ESET also warned that **deepfake voice** has lowered the barrier for **CEO/CFO impersonation**, supplier fraud, and account takeover attempts: attackers can clone a voice from short public audio samples (e.g., interviews, earnings calls, social media) and then target finance or helpdesk staff (often identified via LinkedIn) to pressure wire transfers or bypass authentication and KYC checks.
Jun 29, 2026
AI technologies are rapidly transforming the landscape of cybercrime, enabling scammers to create highly convincing deepfakes and personalized attacks that are increasingly difficult for individuals and organizations to detect. Recent research and industry reports highlight a surge in AI-powered scams, with over 70% of consumers encountering scams in the past year and deepfake audio and video emerging as top concerns. Attackers are leveraging social media as a primary channel to target victims, exploiting the widespread use of mobile devices, which often lack adequate security protections. The sophistication of these attacks is exemplified by incidents such as the $25 million fraud at Arup, where a deepfaked videoconference deceived an employee into transferring company funds. The growing threat of deepfakes and synthetic media is driving a cybersecurity arms race, as organizations struggle to keep pace with evolving attack techniques. Security leaders are increasingly focused on strengthening identity controls, as insurers now scrutinize the maturity and enforcement of identity and access management practices before offering coverage. Research also reveals that current identity document verification systems are hampered by limited and non-diverse training data, making them vulnerable to advanced fraud tactics. As AI continues to lower the barrier for attackers, both technical and human-centric defenses must adapt to counter the risks posed by synthetic identities and technology-enhanced social engineering.
Jun 29, 2026