138 by gurchik | 42 comments on Hacker News.
I work at a company that is not actively hiring, so imagine my surprise when I see 5+ job postings on my company's LinkedIn page. It appears that LinkedIn is automatically importing job postings from other places on LinkedIn and other sites such as angel.co if the company name of the job posting matches your company name on LinkedIn. After importing, the job postings will display your company logo, company description, profile pictures of your connections that already work there, etc, just like a real job posting. The "Apply" link redirects to the original job posting such as from angel.co. The only reason I was able to tell these are not legitimate is because the descriptions of the posts clearly describe a different company. So it seems to be a phishing opportunity is to create a profile on LinkedIn or angel.co with a company name that matches your target company. Write some job postings with descriptions that look like a job posting that the company would actually hire. And now those job postings will be reposted onto the official LinkedIn pages of the company, and applicants will be redirected to your phished webpage.
0 comments:
Post a Comment