Mycert Warns Internet Users Of Online Job Scams

By Author: eccuni
Total Articles: 211
Comment this article

Recently, Malaysia Computer Emergency Response Team (MyCERT) alerted Internet users on job scam e-mails in circulation. The e-mails purportedly appear to come from two reputed Malaysian Oil and Gas companies – Petronas and SapuraCrest. The targeted individuals are offered attractive positions in the oil companies. The scam e-mails inform users that they are selected for the said position after thorough verification of their resumes. Alternatively the e-mails seek resumes of Internet users. They entice users by stating that their appointment to the said position would be solely based on the information provided by them in their resume and there would be no further physical, online or telephonic interview. MyCERT has also released three sample fake online job scam letters. One of the fraudulent job offer letter also mentions remuneration details and joining date. The e-mails suggest the targeted users to contact a particular executive of the Human Resource department of the company and also provide telephone numbers and e-mail address of the said person. The e-mail address is spoofed to make it appear as coming from a legitimate ...
... company.

Scammers extract contact details of individuals from online job sites. They then design well-crafted e-mails to target large number of individuals. Some scam e-mails may also seek payments from the user. Internet users, who fall prey to the scam, divulge more valuable personal and financial information to the scammers.

MyCERT has cautioned users against responding to scam e-mails. Individuals, who have been defrauded by scammers, must lodge complaint with the counter crime agencies. Users must satisfy themselves of the authenticity of the e-mails from unknown parties. In case of suspicion, individuals may directly communicate with the legitimate company on the contact details provided on website. Users must desist from divulging any personal and financial information in response to the scam e-mails. Internet users can identify the scam e-mails by checking for grammatical mistakes, poor language, spelling errors or prefixes and suffixes in the company name and identical, but incorrect domain name of the company in e-mail addresses.

Online job sites must also verify the authenticity of the recruiters before listing them on their sites. They must have mechanism in place for facilitating job seekers to complain or report fraudulent job offers. Reported fake offers must be investigated and reported to the concerned counter crime agencies. Hiring professionals qualified in IT masters degree would help in timely detection and mitigation of threats.

Organizations, which have been misrepresented by the fraudsters for making fake employment offers must constantly evaluate the security threats in the IT environment. They must lodge complaint with the counter crime agencies. They must have proper policies in place to identify and alert users on fraudulent activities conducted by impersonating and misrepresenting the company. Online technology degree and e-learning programs may help IT professionals in updating their technical skills and know-how.

Growing instances of cybercrime have led to creation of special task force and cybercrime cells by counter crime agencies. There is increased demand for professionals qualified in IT courses such as online computer degree, computer forensics, security audit and penetration testing.