How It Really Happened
How It Really Happened: NINJIO Season 10, Episode 12 – Who Works Here?
Who Works Here?
Security Topic: Job Application Scams
NINJIO Season 10: Episode 12
Emotional Susceptibility: Obedience
Job application scams are on the rise, whereby threat actors use fraudulent identities and deepfake videos to land remote jobs that allow them access to company money, IP and sensitive information — as well as the opportunity to install malware. Viewers are provided with various methods to protect themselves and your organization.
Teachable Takeaways
- Fake job applicants are becoming an increasing threat. Because of this, new hires should be treated with the same caution as external contacts. Don’t grant system access, approve sensitive actions, or send internal documents without confirming their identity.
- Signs an A.I. filter is being used to hide a person’s identity include strange lags, strange distortion around face movements, speech that doesn’t match lip movement, poor eye contact, robotic answers, or simply a reluctance to turn on the camera. Politely asking for a liveness check can help detect fraudulent activity.
- A liveness check can include asking a video call participant to put their hand in front of their face, show a government-issued ID, or turn off camera filters & background, as well as show multiple angles of their face.
Additional Reading
- Fake job seekers are flooding the market, thanks to AI – CBS News
- Deepfake job candidates flagged as growing cyberthreat – CFO Dive
- Fake military IDs, bogus résumés: How North Korean and Chinese hackers use AI tools to infiltrate companies and other targets – Business Insider
- Fake Job Seekers Are Using AI to Snatch up Jobs and Run Workplace Scams – The HR Digest
- The Rise of Deepfake Job Applicants and How Employers Can Avoid Them – Mondo
- Best Practices for Defeating Deepfake Candidate Fraud – Dice
- AI, Deepfakes, and the Rise of the Fake Applicant – What Employers Need to Know – The National Law Review
- Protecting Against Deepfakes in Remote Hiring: A CISO’s Guide – Cyber Security Tribe
