Morgan Hunter’s Post

Please read and share about fraudulent recruitment scams that seem to be hitting the industry via What's app. I do hope WhatsApp can help work out a solution to this problem as it seems to be a global issue that is on the rise. #whatsapp #recruitment #scams #scamalert

Attention all job seekers, especially those in the Talent Acquisitions and Recruiting field. I’m disheartened to report a (new to me) scam that’s hitting LinkedIn. A person going by the name Deepika Shukla claiming to represent Evergreen Technologies, LLC using the email address of careers.evergreentech@gmail.com has been messaging and emailing job seekers about a remote TA role. A detailed job description will be sent along with an extensive experience questionnaire. “Deepika” will either interview you over the phone or simply email you an offer letter and schedule an orientation. I received an offer letter within 7 minutes of completing a brief phone interview. I imagine that at that point the job seeker will be asked to complete onboarding forms requiring information such as social security number, date of birth and even direct deposit information. I hit the “too good to be true” stage when that very generous offer letter was emailed to me after that cursory interview. I didn’t sign the letter. I have confirmed with the actual Evergreen Technologies, LLC that this person has no affiliation with them. I have forwarded all of the correspondence to my contact at the REAL Evergreen Technologies in the hopes of helping them with their BBB report. Caveat emptor folks. Identity theft through LinkedIn contacts. The “work at home” scams have hit the big time. 😡

The market is tight the fight for top tier talent to interview for your company's is fiercer than ever. Let alone accept a new role. Opportunity may have set vacant/ On hold for the majority of 2023 your now looking to make a move. Do you go it alone? Do you reach out to a Big generalist recruitment firm who follow their own metric of delivery? Or do you approach a specialist agency to plan and execute exactly what what your looking for! Considering the competitive talent market and the need to breathe new life into your organization, it's essential to explore various options to find the right talent. Here are a few reasons why mixing up your approach and embracing new strategies may help: 🔒 Specialized Expertise: Agency recruiters have deep knowledge of the cybersecurity field, understanding the unique skills and qualifications needed for roles like ethical hackers, security analysts, and threat hunters. 🌐 Extensive Candidate Networks: They maintain extensive networks of cybersecurity professionals, including those not actively seeking jobs, who could be ideal matches for specialized security roles. ⏳ Time and Resource Savings: Outsourcing the hiring process to agency recruiters saves valuable time and internal resources, allowing cybersecurity companies to focus on protecting their assets. 🚀 Faster Hiring: Agency recruiters often fill cybersecurity positions more quickly than in-house teams due to their networks and expertise, crucial in a fast-moving threat landscape. 🤐 Confidentiality: For sensitive cybersecurity roles, agency recruiters can maintain a higher level of confidentiality during the hiring process, reducing the risk of security breaches or data leaks. Particularly relating to the cyber security talent! 🌟 Cybersecurity Talent Scarcity: In a competitive talent market, agency recruiters can help identify and attract the scarce pool of highly skilled cybersecurity professionals. 🔐 Security Clearance Expertise: For roles requiring security clearances, agency recruiters understand the intricacies and can navigate the clearance process effectively. 💼 Cybersecurity Tools and Certifications: Agency recruiters may have access to resources and tools related to cybersecurity certifications and specialized skill assessments to ensure candidates meet the specific requirements of the role.

Candidate fraud in hiring has surged since the COVID-19 pandemic. Fraud in hiring leads to mishires that are extremely costly to any business. Ways to prevent fraud in hiring assessments? 1) Scrutinise the applications 2) Background checks 3) Verify recommendations 4) Document verification 5) Follow up a skill-based assessment with a skill-based interview 6) Fraud proof assessment tools... Read on to learn more about how using a recruitment platform can help prevent fraud by verifying candidates' identities, checking their references, screening for red flags, and more. https://bit.ly/44gXxFI #remotehiring #recruitingplatforms #candidatefraud

It has come to our attention that some people in the job market have gotten some sketchy looking emails pretending to be from us. We understand that this could be confusing, especially since we’re currently hiring. With the current increase in job recruitment phishing scams globally, we wanted to remind you that *all* official communications from Synctera will only come from a *synctera.com* email address. If you’ve received a communication that you have a question or concern about regarding Synctera, please contact: recruiting@synctera.com Meanwhile, here are some helpful resources to help navigate these unfortunate and rapidly prevalent phishing scams affecting those working in all industries, especially ones with remote working environments. Job scams guide via the FTC - https://lnkd.in/dYUjMUrv Fake Job Scams Are Exploding. Here's How to Catch an HR Impostor via NBC -  https://lnkd.in/gupaEUFk Searching LinkedIn or Indeed? Here's how to avoid job scams: Ask HR via USA Today - https://lnkd.in/gmUZwpbX 17 Common Job Scams and How To Protect Yourself - https://lnkd.in/gARBmGRE

This post is for good people looking for jobs today…. Please be aware that scams are everywhere, except this post at least. Today I was suspect of an opportunity response from a potential employer. I will point out the red flags so that hopefully someone doesn’t become a victim of Phishing on LinkedIn. Red Flags: 1.        HR imposter that performed initial phone review did not have a phone number. 2.        HR imposter also wanted to do interview using Microsoft Teams using only chat. 3.        Communication between HR imposter and “hiring manager” not professional. Dates and times for next interview were mixed up.  4.        Domain name supplied did not match actual company URL address as advertised. The threat actor was using iManage.team vs real company iManage.com.  5.        Whois search provided Registration date of 7/2/24. Two weeks ago at time of this post. Not much time to have a reputable domain name.  6.        The HR imposter on LinkedIn never posted any content. When you clicked on Contact button, the same LinkedIn imposter was displayed.  7.        The “hiring manager” on LinkedIn never posted any content. When you clicked on Contact button, the same LinkedIn imposter was displayed like above.  8.        I was chatted “congratulations” from the HR imposter and opened up the contents to download. There I found a form that asked for my signature and banking information for direct deposit. NEVER SEND BANKING INFORMATION TO ANYONE EVER. *** See attached screenshot *** 9.        I sent a chat message to the HR imposter and the return chat was English but not our regular dialect wording.  10.  I also sent a chat to the HR imposter asking why the equipment to be delivered to me for work included an Apple iMac Pro 27” 5K Retina display. Now I am not an apple expert, but this won’t be easy for remote work as it is a desktop (role was advertised fully remote). I was quickly told I would have the option once I signed everything. I did report these two threat actor accounts to LinkedIn as well as letting GoDaddy admins reach out to the actual domain name owner of iManage.com so they know there is an imposter potentially negatively affecting their reputation. FYI....Carleton is my legal name. Safe job hunting, be vigilant always and good luck! 

Hiring tips from a random cyber guy (after reviewing over 100 applications and messages about the role I'm hiring for): 1. Local applicants will take precedence over ones willing to relocate (unless it's remote at which point you are competing with hundreds of others.) 2. Have a resume that fits the job description as best as possible (3 well-crafted applications will yield better results than 100 generic ones.) 3. Don't undersell or oversell yourself on your resume (this takes some skill.) 4. Be honest during the interview. It is ok to say, "I don't have experience doing that particular thing, but I am familiar with how it works and could pick it up quickly." 5. Read the actual job description and identify what you like and don't like about the job. Ask questions relating to those if you talk to the company. 6. Don't send your resume to someone directly unless they request it - this is a security risk and in my industry is fairly insulting. Upload the resume to the tool or system. 7. If you are reaching out to someone directly (bypassing the application process) make sure it doesn't come across as a copy/paste message. If you can't take the time to customize a message by using my company name and some thoughts about the role itself, don't expect me to take the time to review your application. [Added Item 8] 8. Keep track of what companies you apply for. It's embarrassing how many people applied for this role on LinkedIn, got a response, then applied for the role on Indeed or some other tool within a few hours of getting a response.

Warning: Potential Job Scam Alert! If you receive an interview email from hire@uniswapcareers.com, beware! The website associated with this email address does not exist, indicating it may be a fraudulent scheme. Always check the authenticity of the website associated with the email addresses they use. Stay vigilant and cautious when responding to such emails. Please share in the comments if you receive such emails to help others identify potential fraud companies.

𝐈𝐬 𝐘𝐨𝐮𝐫 𝐑𝐞𝐦𝐨𝐭𝐞 𝐇𝐢𝐫𝐢𝐧𝐠 𝐏𝐫𝐨𝐜𝐞𝐬𝐬 𝐒𝐞𝐜𝐮𝐫𝐞? 𝐏𝐫𝐨𝐭𝐞𝐜𝐭 𝐘𝐨𝐮𝐫𝐬𝐞𝐥𝐟 & 𝐘𝐨𝐮𝐫 𝐂𝐨𝐦𝐩𝐚𝐧𝐲! The rise of remote work has opened doors for top talent, but also for fraudsters. As recruiters, we have a responsibility to stay vigilant. 𝐈𝐧 𝐭𝐡𝐢𝐬 𝐩𝐨𝐬𝐭, 𝐈 𝐬𝐡𝐚𝐫𝐞 𝐤𝐞𝐲 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐩𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬 𝐭𝐨 𝐜𝐨𝐦𝐛𝐚𝐭 𝐟𝐫𝐚𝐮𝐝 𝐢𝐧 𝐫𝐞𝐦𝐨𝐭𝐞 𝐡𝐢𝐫𝐢𝐧𝐠! - 𝐕𝐞𝐫𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐢𝐬 𝐊𝐞𝐲: Always verify candidate identities. Utilize government-issued ID checks and consider third-party verification services. - 𝐁𝐞𝐰𝐚𝐫𝐞 𝐨𝐟 𝐏𝐡𝐢𝐬𝐡𝐢𝐧𝐠 & 𝐅𝐚𝐤𝐞 𝐃𝐨𝐜𝐮𝐦𝐞𝐧𝐭𝐬: Train yourself (and your team) to spot red flags in emails and documents. Look for inconsistencies, unprofessional language, and suspicious attachments. - 𝐒𝐞𝐜𝐮𝐫𝐞 𝐂𝐨𝐦𝐦𝐮𝐧𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬: Only use company-approved communication platforms with strong encryption features. Avoid free public options. - 𝐁𝐚𝐜𝐤𝐠𝐫𝐨𝐮𝐧𝐝 𝐂𝐡𝐞𝐜𝐤𝐬 𝐌𝐚𝐭𝐭𝐞𝐫: Don't skip background checks! They're an essential tool to verify employment history and qualifications. - Get Savvy with Online Tools: There are online tools to help with everything from ID verification to plagiarism detection. Leverage them for an extra layer of security. 𝐋𝐞𝐭'𝐬 𝐤𝐞𝐞𝐩 𝐭𝐡𝐞 𝐜𝐨𝐧𝐯𝐞𝐫𝐬𝐚𝐭𝐢𝐨𝐧 𝐠𝐨𝐢𝐧𝐠! 𝐒𝐡𝐚𝐫𝐞 𝐲𝐨𝐮𝐫 𝐛𝐞𝐬𝐭 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐩𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬 𝐢𝐧 𝐭𝐡𝐞 𝐜𝐨𝐦𝐦𝐞𝐧𝐭𝐬 𝐛𝐞𝐥𝐨𝐰! P.S. Looking for a recruitment partner who prioritizes security and diverse talent acquisition? Reach out to Cherry Blossom Digital today! ➝ https://lnkd.in/ej3_rMTx #remotehiring #security #fraudprevention #recruitingtips #talentmanagement

Platform approach to Cybersecurity hiring? One of the key trends across the Cyber industry is vendor consolidation. This is a trend we are seeing across the hiring landscape too... My honest perspective... almost every time I speak with a prospective customer who has had a rec open for 3+ months longer than expected there are 2 common themes: 1. They are running the search with 'several' agencies 2. The firm they have partnered exclusive with aren't specialist to cybersecurity Why are these problems? - Agencies prioritise retained & exclusive business vs competing on roles - Agencies who take non-exclusive roles usually NEED the business - Receiving the same vendors' name from multiple headhunters is not a good look - 'Fastest finger first' recruitment approach dilutes the quality of candidates you receieve - Are they representing your name/brand accurately in the market if they don't specialise in the space? - The generalist firm likely won't have a strong network to be introduced to hard to find/contact A-players When you look at the most successful vendors for hiring, they work with very few agencies, are extremely selective on who they choose, assign roles exclusively to an agency, and have a strong internal TA function. At Hub-scale we are building a specialist business that is aligned to the pain we see every day. We are building a platform service specific for the needs of a Cybersecurity vendor (Seed -> Public). We are building 3 specialist teams (Executive, Technical/Product & GTM) who partner with the same customers as one comprehensive solution. Allowing us to offer products such as discounted Multi-Role Project Hires & Talent Aquisition extension services. Our aim is to increase value and reduce cost for our customers. In turn, they value us as strategic partner and trust us to deliver on their growth plans. It's a win win! Hub-scale Elliott White James Clancy Katie Minihan David Loader