Corporate Reputation Attacks: Dissecting the Latest Job Offer Scams
summary
Criminals impersonate Graylog and real employees using typosquatted domains like grayllog.co and hosted documents with an Office 365 GUID that lets Microsoft trace and disable the tenant. Investigators use ExifTool and Kali to extract metadata, find 33 victim reports, and document cash-out checks of $3,500–$7,000 sent via compromised FedEx accounts. Response includes registrar takedowns, Cloudflare frame-blocking headers, reporting Gmail/outlook abuse, aggregating indicators in a form, and handing evidence to FBI and banks — within a week phone numbers and impersonation cease.
AI-written summary · about
chapters (9)
- 0:00Introduction to job scams
- 1:05Modern job scam tactics
- 4:14How fake job scams work
- 10:58Victim interaction details
- 17:41Scam payoff and fraud mechanics
- 23:45Law enforcement response
- 28:42Why scams succeed today
- 30:51Protecting against reputation attacks
- 34:02Q&A session
related talks
07mThe Fake IT Worker Scam Unmasked
55mSocial Engineering: Hacking Humans
29mFake Hires, Real Threats: When Background Checks Aren’t Enough
28mWalk-Through of Business Email Compromise: Human Factors or Human Failures?
38mScammers Who Scam Scammers, Hackers Who Hack Hackers: Exploring a Sub-economy on Cybercrime Forums
35mHow I Handled One of the Biggest Banking Fraud Incidents of 2020
25mFighting Back Against Large-Scale Phishing Campaigns Targeting Swedish Municipalities, Regions ...
38mExploits in Wetware