BE AWARE of this HUGE LinkedIn SCAM!!

There's a huge LinkedIn scam happening right now and it's insanely organized!!

On my LinkedIn page, I've been talking a lot about LinkedIn scams. But I've never seen such an organized scam yet in my life, and I wanted to raise awareness as fast as I could...

?

So a few weeks ago, I changed the country settings on my LinkedIn profile to Sunnyvale, CA. I got so many job offers via email and LinkedIn messages, and this is about those?

?

First, I got messages from people at "VeeAR Projects Inc."?and emails from the?veear[.]com domain.

They all started writing the letter by saying just "Greetings!" instead of my name. Which is a good indication that they don't know my name, or that this is a copy and paste process, or that it's automated.So when reading further, you can see there are so many spelling and grammatical errors. But since Arun has a literal date stamp on top of the mail, So I realized they're just copy pasting the text to me.

?

Because the domain from which I received the email and the domain provided in the email to respond to them are the same, I performed an analysis on that domain, which is veear[.]com.

?

I learned that veear[.]com is redirecting to veearprojects[.]com (which I later found out was also malicious) This method is usually used to impersonate the original domain. So when a person loads the fake domain, they are being redirected to the original domain. What the person sees is the original domain website, which is fully functional or maybe well known. So they’re under the impression they’re receiving mail from something real.

?

Then I learned that veear[.]com doesn’t have an SSL certificate. SSL is a digital certificate that verifies the identity of a website and encrypts information sent to the server using SSL technology. It’s like an electronic "passport." Most well-known legitimate businesses will never hesitate to invest in a long-term SSL certificate.

?

Further down the rabbit hole, I discovered that veear[.]com's mail servers are blacklisted. Most mail servers get blacklisted because of spam. Blocking mail servers allows other mail servers to check if an email from an IP address might have been flagged for spam in the past. That's why it's already in my spam folder, and...

Thanks to everyone who took the time to click the "report spam" button. You're a HERO!!

?

But sadly, none of the security vendors have flagged the domain as a malicious or bad domain yet. After finding out some IP resolutions, with those IPs having a history of really bad traffic like exe files targeting Windows OS and apk files targeting Android OS.

So basically they’re cooking malware?

Later, I replied to these emails including a link I created with an IP logger and a URL shortener. It gave me IPs for multiple locations in "America". Later, I assumed these people were using VPNs. Smart? Not for hackers!!

?

Then I went to do research on their LinkedIn page. I gasped when I saw that 39000 people were following this page, granting a high level of digital trust to this scam. I learned this happened because when people apply to jobs on LinkedIn, the features make them automatically follow the company for future updates and they are constantly posting jobs!!

The company's LinkedIn page looks like this...

Something grabbed my eye again. They have 94 employees currently, and 100% of them are recruiters!!!

Some profiles I visited had 99+ endorsements!!

I'm not sure what their motive is because they haven't gotten back to me yet. But everyone has a phone number from the USA, and their profiles have apparently been on LinkedIn for a few years. As of now, I cannot do anything but raise awareness.

??

All I can still tell you how to look out for such scams...?

• Notice if the account has common names.
• Are they talking about easy money before the job description?
• Do you sense any unnecessary urgency?
• Are they gaslighting you when you ask questions about their offers?
• Are they requesting personally identifiable information?
• Do they have a header photo? Try reverse image searching for their display pictures!
• Check their connections.
• Check their company.
• Check the endorsements given to them, and by whom.
• Check their work experience.
• Check their activities (ex: check if there are any comments claiming to know this person in real life)
• Checking their skill sets. Does the skill set match the job they're claiming to be pursuing?
• Spot spelling mistakes and grammatical errors.
• Check if their profiles are complete or not.
• Are they very new to LinkedIn?

I don't understand how somebody can seriously play with someone's struggle to survive. Finally, I would like to leave a great quote by a great man...

"Rather fail with honor than succeed by fraud"

If you happen to find one NEVER just?block?them,?report?them to LinkedIn ??