TLDR
Attacker scrapes 50k LinkedIn profiles, pipes each into an LLM with prompt 'write a credible recruiter outreach citing this person's last role and a fake job at their target company' — yields tens of thousands of unique, hyper tailored...
How it works
Attacker scrapes 50k LinkedIn profiles, pipes each into an LLM with prompt 'write a credible recruiter outreach citing this person's last role and a fake job at their target company' — yields tens of thousands of unique, hyper tailored...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1Tells: 1) recruiter email references YOUR specific past role and a plausible but non existent posting; 2) link leads to a job board lookalike domain capturing creds + 2FA push; 3) recruiter's LinkedIn was created <60 days ago; 4) follow ups are themselves LLM written and never reference earlier replies' specifics.
- 2DO: independently search the posted role on the company's official careers site; verify recruiter on official org chart.
Source
OpenAI-Threat-Disclosure
Source reviewed by Mythos Forensic Team
https://openai.com/index/influence-and-cyber-operations-an-update/FAQ
Is AI scaled spear phishing — LinkedIn scrape + per victim customisation a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
Tells: 1) recruiter email references YOUR specific past role and a plausible but non existent posting; 2) link leads to a job board lookalike domain capturing creds + 2FA push; 3) recruiter's LinkedIn was created <60 days ago; 4) follow ups are themselves LLM written and never reference earlier replies' specifics.; DO: independently search the posted role on the company's official careers site; verify recruiter on official org chart.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.