LEGALAUDIT

Scam Watch

Como reconocer AI scaled spear phishing — LinkedIn scrape + per victim customisation?

TLDR

Attacker scrapes 50k LinkedIn profiles, pipes each into an LLM with prompt 'write a credible recruiter outreach citing this person's last role and a fake job at their target company' — yields tens of thousands of unique, hyper tailored...

Como funciona

Attacker scrapes 50k LinkedIn profiles, pipes each into an LLM with prompt 'write a credible recruiter outreach citing this person's last role and a fake job at their target company' — yields tens of thousands of unique, hyper tailored...

Señales de alerta

  • Presion urgente para hacer clic, pagar o compartir codigos de inmediato.
  • Enlace o remitente que no coincide con la organizacion oficial.
  • Solicitud de tarjeta, contrasena, OTP, firma de wallet o transferencia.

Qué hacer

  1. 1Tells: 1) recruiter email references YOUR specific past role and a plausible but non existent posting; 2) link leads to a job board lookalike domain capturing creds + 2FA push; 3) recruiter's LinkedIn was created <60 days ago; 4) follow ups are themselves LLM written and never reference earlier replies' specifics.
  2. 2DO: independently search the posted role on the company's official careers site; verify recruiter on official org chart.

Fuente

OpenAI-Threat-Disclosure

Fuente verificada por Mythos Forensic Team

https://openai.com/index/influence-and-cyber-operations-an-update/

FAQ

Es AI scaled spear phishing — LinkedIn scrape + per victim customisation una estafa real?

Si. Trata el mensaje, la llamada o la solicitud de pago como sospechosos hasta que los verifiques por un canal oficial.

Cuales son las primeras senales?

Presion urgente para hacer clic, pagar o compartir codigos de inmediato.; Enlace o remitente que no coincide con la organizacion oficial.; Solicitud de tarjeta, contrasena, OTP, firma de wallet o transferencia.

Que debo hacer primero?

Tells: 1) recruiter email references YOUR specific past role and a plausible but non existent posting; 2) link leads to a job board lookalike domain capturing creds + 2FA push; 3) recruiter's LinkedIn was created <60 days ago; 4) follow ups are themselves LLM written and never reference earlier replies' specifics.; DO: independently search the posted role on the company's official careers site; verify recruiter on official org chart.

Puede LegalAudit revisar mi caso?

Si. Abre el chat gratis y pega el mensaje, el enlace, el remitente o los datos de pago para un triage.