Fake Hires, Real Threats: When Background Checks Aren’t Enough
summary
Fraudulent applicants create fake identities, pass interviews and background checks using stolen US identities (notably the July 2024 Noor case), then exfiltrate data and funnel pay back to state actors. Examples include calls coming from Russia, Pakistan and Spain, VPNing into environments, and batches of LinkedIn accounts with 404 GitHub links. Practical defenses that worked: Zoom geoblocking, auditing and removed Wellfound integration from Greenhouse, interviewer training, knockout questions, in‑person or UPS laptop pickup and laptops shipped to other addresses reconciliation and enhanced monitoring.
AI-written summary · about
chapters (12)
- 0:00Introduction by Mabel
- 0:23Fake it till you make it risks
- 2:29History of fraudulent candidates
- 6:03Clockwise’s fake candidate incidents
- 9:17Red flags in fake resumes
- 11:49Patterns of fake candidates
- 14:40Hiring bias and human nuance
- 16:02Understanding hiring processes
- 17:48Mitigation tactics pre-screening
- 20:43Mitigation tactics onboarding
- 22:13Future of hiring evolution
- 23:16Closing remarks and Q&A
related talks
07mThe Fake IT Worker Scam Unmasked
54mInsider Threats and New Economy Industries
26mIntegrating Identity and Fraud
46mSocial Engineering: Hacking Humans
32mFriend or Replicant: How Attackers Automate and Disguise Themselves
38mExploits in Wetware
49mBeyond Takeover: Attacker’s in. Now what?
41mHacking Humans : Social Engineering Techniques and How to Protect Against Them