After two years with restrictive measures due to the Coronavirus, this 2022 is the year in which it seems that we can resume everything we did pre-2020. And the desire to travel, to enjoy life is maximum now that the heat is here. It is not yet summer, but the hotels are full and the Tourism and Restaurant industry in Spain is getting underway, which brings thousands of new seasonal jobs that can last from May to mid-late September.
That represents a lot of job offers. And also unfortunately a lot of opportunity for cybercriminals.
Fake job offers on WhatsApp
As Panda Security experts have discovered, there are many fake job offers running on WhatsApp, and they talk about how we can recognize them. As we see in the images, one of the offers makes use of a message sent through WhatsApp that refers only to the duration of the job, half or full time and the daily salary, around €3,500 per weekwhen “Salaries are normally offered on a monthly basis.
A trick of cybercriminals is precisely this: using attractive figures to make it tempting for the victim to open the link. They do not give more information about the type of position, the place or the hiring company at the same time that they offer a link to consult all the details, from which they then articulate their scam through phishing.
In the second image, the message has been sent via SMS, which is known as smishing. The message is very similar, number and duration of the position and lack of information about the class of it, but there is a small significant description that says that “the work is very simple, and can be done at any time and from anywhere”, another social engineering ruse no doubt. Here the hackers use telecommuting as a hook. And they also go a step further, since they do not provide a link, but a WhatsApp contact.
by phone call
According to Panda, it may also be the case that lThe same scam is carried out through telephone calls, a technique known as Vishing. “It usually occurs as a later step after having given the supposed recruiter some personal data by text, another person from the supposed same company calls you with the pretext of verifying the data, which gives the plot more consistency and veracity, but it is there really when the robbery is committed”says Hervé Lambert Global Consumer Operations Manager at Panda Security.
The company has also provided a series of tips in the publication to identify if that ad that reaches us via WhatsApp, SMS or even by call is legitimate or is more false than a 3 euro coin:
The recruiter contacts the job applicant directly
It usually happens via email, from where it could also be a scam. First, check if you have applied for that job, otherwise it means that they have somehow got your contact without you having consciously given it.
The salary and hours they are too much good ones as to be true
Knowing how the market is, it is paradoxical that they can offer you 3,500 euros per week, which translates into 14,000 euros per month, for flexible hours. In this case, the origin of the offer must be investigated. To do this you can:
- Ask for the reference of the offer
- Check if you are on any of the job demand platforms
- Investigate the contractor company, its website, contact information, location, etc. It would be appropriate to call or contact the company to verify the posting of the position.
- If even so, we still have doubts, we must ask for a signed offer letter. Being a fairly official document, if it is a scam, either they will not send it, or it will contain serious writing errors.
Notice the recruiter’s spelling, wording, and communication
“If this is little or nothing professional, the logical thing would be to distrust. This can be checked by looking for inconsistencies in grammar, syntax, and the way the employer writes.Lambert confirms.
Do a Google search with keywords that are in the message
Among the results there may be references from other users warning of this scam or similar.
If they ask for personal information, banking or requires any payment to the company before hiring
After the signing of the contract, then the tax data, bank documents and other necessary information can be given.
Check the veracity of the documents they send, since with a download it could infect your computers with some type of malware.
Check the documents in which they ask you your Electronic signaturethey can be false and could steal your digital identity, the gateway to many other procedures.