Listen to the episode
TLDR
Job seekers on Indeed are being targeted by scammers posing as recruiters who instruct victims to install a fake "interview" Android app. The malicious APK impersonates the Indeed login page, then creates a VPN connection and requests...
How it works
Job seekers on Indeed are being targeted by scammers posing as recruiters who instruct victims to install a fake "interview" Android app. The malicious APK impersonates the Indeed login page, then creates a VPN connection and requests...
Red flags
- A "recruiter" asks you to sideload an APK or install an app outside Google Play to complete or update your interview. The app immediately opens a VPN and asks for Android Accessibility permissions right after you enter your email. The app blocks removal: tapping Uninstall in Android Settings bounces you back to the home screen
What to do
- 1Never install APKs sent via chat, email, or interview links
- 2legitimate Indeed interviews run in a browser only. Verify any recruiter by contacting the hiring company directly through its official website before clicking or installing anything. If you already installed a suspicious app, reboot into Safe Mode, revoke its Accessibility permissi
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/scams/2026/08/beware-of-fake-indeed-interview-apps-used-to-install-spywareFAQ
Is Beware of fake Indeed interview apps used to install spyware a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
A "recruiter" asks you to sideload an APK or install an app outside Google Play to complete or update your interview. The app immediately opens a VPN and asks for Android Accessibility permissions right after you enter your email. The app blocks removal: tapping Uninstall in Android Settings bounces you back to the home screen
What should I do first?
Never install APKs sent via chat, email, or interview links; legitimate Indeed interviews run in a browser only. Verify any recruiter by contacting the hiring company directly through its official website before clicking or installing anything. If you already installed a suspicious app, reboot into Safe Mode, revoke its Accessibility permissi
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.