Criminals' Job Ads Expose Themselves with Scripted Voice Phishing Scams
Criminals are making fools of themselves on the dark web by posting job listings that include scripts for voice phishing scams, according to the latest installment of the Trellix Advanced Research Center's Dark Web Roast.
The most recent example comes from a Telegram user identified as Derian (@crɑick) who posted an ad in the UK Fraudsters Telegram channel in August seeking callers to work for an apparent Google Security Team voice-phishing scam.
The ad claimed that applicants would not be required to read from scripts, but then proceeded to print the exact script they would need to use: 'Good afternoon, this is [name] reaching you on behalf of the Google Account Security Team on a recorded line. Am I speaking with Larry Boyles?'
The Trellix threat-intel analysts note that the 'recorded line' flourish is a nice touch, because nothing says legitimacy like a fraudster cosplaying compliance theatre.