Researchers at Malwarebytes warn that job seekers are increasingly vulnerable to scams as AI enables them to take a “spray-and-pray” approach to job applications.
Users who have automated their job application process are more likely to forget where they’ve applied, and an unsolicited message from a recruiter may seem more plausible. Job seekers can also be more willing to overlook or ignore red flags associated with scams, since they’re anxious to avoid missing an opportunity.
“Job offer scams come in different forms,” Malwarebytes says. “We’ve talked about fake interview apps that are spyware, Calendly interview invites that steal social media credentials, so-called parcel expert jobs, advance fee scams, task scams, and recruiters stealing Google credentials. There are many more, unfortunately. These examples illustrate some of the risks of a bogus recruitment approach: financial fraud, malware installation, and account theft.”
Malwarebytes offers the following advice to help users avoid falling for these scams:
- “Keep a simple application log. Record the employer, role, application date, and original listing so you can check when someone contacts you.
- Verify both the vacancy and the recruiter independently. Find the employer’s website yourself and use its published contact details. The existence of a real vacancy doesn’t prove the person messaging you represents that employer.
- A familiar logo doesn’t prove anything. Scammers imitate legitimate companies and may use real employees’ details to support the impersonation.
- Never pay to unlock earnings. A request to deposit money before you can withdraw supposed commissions is a hallmark of a task scam.
- Pause before sharing sensitive information, installing software, or signing in through a recruitment link. Verify the approach first, especially if it arrives unexpectedly.
- Enable multi-factor authentication on your important accounts to make them harder to take over, even if someone steals your password.
- Use up-to-date anti-malware protection with real-time scanning to help detect and block malicious downloads.”
Malwarebytes has the story: https://www.malwarebytes.com/blog/news/2026/10/spray-and-pray-job-applications-could-make-it-harder-for-you-to-spot-a-scam
