Uncovering a Fake Recruiter Scam

This website use cookies to give you the best, most relevant experience. By continuing to use this website you’re accepting this. If you wish to find out more, click this link (or by clicking the Privacy link at the bottom of any page)

This write-up comes from a long time SpiderFoot user, Osint_Matter, a senior threat intelligence professional who uses SpiderFoot and other tools to investigate threats targeting their organization. In this post, Osint_matter investigates a seemingly harmless email from a legitimate looking recruiter email, uncovering a ring of recruitment scam websites performing identity theft, potentially controlled out of China. A great read along with some useful techniques to learn.

I’m Osint_Matter, an OSINT and Threat Intelligence professional madly in love with SpiderFoot for a very long time. In my spare time I have developed osintmatter/shortemall, a simple but effective Python tool for unearthing gems and dangers in the little-investigated world of shortened URLs (learn more here). 

This story all began with an email sent to my personal email address from one Sarah Taylor, Senior Recruiter at a corporate services and headhunting company. There are multiple elements of interest from the email:

Leave a Comment