--- title: Try not to get scammed while looking for work | daily.dev description: A developer shares a first-hand account of nearly falling victim to a sophisticated job scam. A fake CTO posing as a fintech recruiter on LinkedIn moved the... canonical: https://daily.dev/posts/try-not-to-get-scammed-while-looking-for-work-ypwkmxgrx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Try not to get scammed while looking for work | daily.dev og:description: A developer shares a first-hand account of nearly falling victim to a sophisticated job scam. A fake CTO posing as a fintech recruiter on LinkedIn moved the... og:url: https://daily.dev/posts/try-not-to-get-scammed-while-looking-for-work-ypwkmxgrx og:image: https://api.daily.dev/og/posts/ypwKMXgRX.png og:image:alt: Try not to get scammed while looking for work og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Try not to get scammed while looking for work **[Lobsters](https://daily.dev/sources/lobsters)** · 4 min read · 0 upvotes · 0 comments ## Summary A developer shares a first-hand account of nearly falling victim to a sophisticated job scam. A fake CTO posing as a fintech recruiter on LinkedIn moved the conversation to Telegram, then used spoofed Microsoft Teams and Zoom meeting links hosted on lookalike domains (zoom.uz07web.us, teams.microsomeet.com) to trick the target into running malicious terminal commands via curl piped to zsh. The scam was caught when the author noticed the fake domain in the URL. The post connects the experience to a Google Cloud threat intelligence report on similar cryptocurrency-targeting attacks and outlines the red flags: requests to move to Telegram, fake 'SDK update' prompts, and terminal commands disguised as meeting fixes. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Dev targeted by sophisticated job scam](https://daily.dev/posts/dev-targeted-by-sophisticated-job-scam-1c3sgwpf2) · The Register · 0 upvotes · 0 comments - [How I Almost Got Hacked By A 'Job Interview'](https://daily.dev/posts/how-i-almost-got-hacked-by-a-job-interview--h744ue0mq) · Hacker News · 247 upvotes · 33 comments - [New wave of fake job scams impersonating recruiters](https://daily.dev/posts/new-wave-of-fake-job-scams-impersonating-recruiters-jqcdbnef9) · GitLab · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#career](https://daily.dev/tags/career), [#malware](https://daily.dev/tags/malware), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/try-not-to-get-scammed-while-looking-for-work-ypwkmxgrx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Try not to get scammed while looking for work","url":"https://daily.dev/posts/try-not-to-get-scammed-while-looking-for-work-ypwkmxgrx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/try-not-to-get-scammed-while-looking-for-work-ypwkmxgrx"},"datePublished":"2026-03-16T10:21:20.488Z","dateModified":"2026-03-16T10:22:52.846Z","description":"A developer shares a first-hand account of nearly falling victim to a sophisticated job scam. A fake CTO posing as a fintech recruiter on LinkedIn moved the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ec2787e40814388d6f68070e297469e0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ec2787e40814388d6f68070e297469e0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Lobsters","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Lobsters","logo":"https://media.daily.dev/image/upload/s--tl8v_Fku--/f_auto,t_logo/v1698841318/logos/lobste.jpg","url":"https://daily.dev/sources/lobsters"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/try-not-to-get-scammed-while-looking-for-work-ypwkmxgrx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,career,malware,phishing","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Lobsters","item":"https://daily.dev/sources/lobsters"},{"@type":"ListItem","position":3,"name":"Try not to get scammed while looking for work"}]} ```