Beware of Fake Skills Tests: Scammers Targeting Job Hunters

Introduction:

In the world of online threats, a new danger is targeting people looking for IT jobs. A group called Sapphire Sleet, part of the larger Lazarus Group, is using a tricky method by pretending to be skills assessment websites. This change in their tactics is a big deal, according to Microsoft, the tech giant.

Tricks Used by Sapphire Sleet:

The Microsoft Threat Intelligence team found out that Sapphire Sleet usually goes after people on professional sites like LinkedIn. They use fake job skill tests to get in touch with people. After the first contact, they switch to other platforms to make it harder to track them.

How They Operate:

Before, Sapphire Sleet sent harmful files or links in messages. But now, they have stepped up their game. They create fake websites made to look like real skills assessment portals. They try to lure in recruiters, asking them to make accounts. These sites are tricky because they're password-protected, making it tough for experts to figure out what's really going on.

The Deception Game:

Sapphire Sleet pretending to be skills assessment portals adds another layer to their sneaky plan. Job seekers might unknowingly share sensitive information on these fake sites, thinking they are legit. The scammers take advantage of the trust people have in real skills assessment services to fool both job seekers and recruiters.

MacOS Malware Connection:

A recent finding by Jamf Threat Labs connects Sapphire Sleet to a new kind of MacOS malware called ObjCShellz. This malware is like a final attack, coming with another MacOS malware called RustBucket. This connection shows that the scammers are flexible and ready to try different ways to attack.

Conclusion:

With threats like Sapphire Sleet on the rise, it's crucial to be careful online. IT job seekers, recruiters, and companies need to double-check the legitimacy of skills assessment websites before sharing any sensitive info. Working together between cybersecurity experts, companies, and online platforms is key to staying ahead of these tricky tactics and keeping the digital job market safe.

At Innobuzz, proudly extending beyond traditional IT services, we emerge as your dedicated partner in cybersecurity. Committed to fortifying your digital assets, Innobuzz offers comprehensive cybersecurity services tailored to combat the evolving threats of the digital landscape. Our expert team seamlessly integrates cutting-edge technology with strategic insights, delivering robust solutions that ensure the integrity and confidentiality of your data. From meticulous threat assessments to proactive defense measures, Innobuzz is your steadfast ally in securing your digital presence. Choose Innobuzz for a holistic approach to IT services that seamlessly combines innovation and security.