A new scam that has been circulating on WhatsApp for over a week promises fake daycare assistant jobs to steal Facebook passwords. According to dfndr lab, PSafe's specialized digital security laboratory, victims are encouraged to apply for an alleged job through an online registration which, among other information, requests access to social network data. So far, the fraud link has already accumulated over 1.7 million hits and shares.
The same method of other scams that usually spread by WhatsApp. By opening a link that accompanies a message distributed to the messenger, the user is brought to an announcement of a supposed vacancy of daycare assistant without requiring experience with promise of salary of more than $ 1,800 and other benefits.
WhatsApp tests feature that makes messages disappear automatically
Scam steals Facebook passwords with fake job posting Photo: Anna Kellen Bull / TechTudo
Want to buy a cell phone, TV and other discounted products? Meet the Compare TechTudo
Attracted by the false opportunity, the victim is forced to fill out a form with name, e-mail and city and to select other areas of activity, in addition to available hours and educational level. However, the answers do not matter: as you advance, the site always informs you that there are dozens of vacancies in the city for the chosen sector.
In the aftermath, the scam requires the user to share the link with their contact network as a way to spread the attack to as many people in the shortest time as possible. As a stimulus, the page shows fake comments on the footer of people who would have gotten the job after completing the steps.
Fake ad promises daycare assistant position Photo: Divulgao / dfndr lab
Theft of Facebook credentials comes next as a final requirement to finalize the application process. The page requests the email and password from the social network and requires the use of a code that actually gives hacker access to the profile through another device. One of the possibilities for the criminal to use stolen accounts in future scams.
These characteristics, coupled with the unemployment scenario in the country, made the coup quickly go viral on the Internet. According to dfndr lab, the number of victims has reached "an alarming level, seen only a few times". Per hour, 9,000 new clicks on the fraudulent link are detected.
Social network scams can be avoided by taking simple precautions such as doubting links with tempting offers, especially if they were sent by strangers or infrequent contacts. In addition, it is important to check for grammatical errors in alleged advertisements and to check with the companies mentioned if a particular offer is actual. Having an antivirus on your phone also helps, as this kind of software can block a fraudulent link. See the best options for Android.
How to Remove Virus on an Android Phone