## Job Seekers Targeted by Malware Hidden in CVs
Cybersecurity experts warn that cybercriminals are disguising malware inside fake or compromised CV files to target job applicants and recruiters. These malicious attachments are being sent through job portals, email, and professional networking platforms, appearing as legitimate resumes or cover letters.
### How the Scam Works
Attackers typically send a file that looks like a common document format, such as PDF or DOCX. However, once opened, the file executes hidden code that installs malware on the victim’s device. This can allow hackers to steal personal data, download more malware, or even gain control of the system.
In some cases, the malware imitates well-known file types or includes filenames that seem relevant to the recipient’s industry, increasing the likelihood that victims will open them. Security analysts have observed these attacks surging alongside seasonal hiring increases.
### Who Is at Risk
Anyone active in the job market—especially applicants uploading CVs to multiple platforms or responding to open job emails—is at risk. Human resource departments are also being targeted as repositories of personal data and organizational access.
### How to Stay Safe
- Only download or open CV files from verified sources or known contacts.
- Avoid clicking strange links or attachments, even if they appear legitimate.
- Use reputable antivirus and endpoint protection software.
- Keep your operating system and browser updated to patch vulnerabilities.
- Be cautious of job offers or recruiter messages that demand quick responses.
> “Cybercriminals exploit trust within professional recruitment networks. What looks like an opportunity may actually be an entry point for malware,” cybersecurity specialists caution.
### Key Takeaway
Digital hiring has streamlined recruitment but also widened the attack surface for cyber fraud. Awareness, verification, and cautious handling of attachments can prevent serious data and financial losses.
***
**Author Summary:** Criminals are hiding malware in fake CV files, tricking job seekers and recruiters; vigilance with attachments is vital to avoid data theft and infection.
more
IBTimes UK on MSN — 2025-11-28