Scammers are sending New Zealand job seekers a fake job-search app that can take over their Android phones, the National Cyber Security Centre (NCSC) says.
The NCSC issued the warning on 4 November. It is advising people to be careful about downloading apps from the internet, "particularly if they have been sent through social media, messaging apps, or by someone they don't know."
It comes at a hard time to be looking for work. Stats NZ's latest figures put unemployment at 5.7 percent.
How the scam works
The NCSC describes the steps:
- The scammer contacts the person about a job, usually through chat messages, and possibly by phone.
- They tell the person to download a "job-seeker" app from a link instead of from Google Play. Installing an app this way is called sideloading.
- After it installs, the app shows a fake Google Play update page, so it looks as if it came from the official store.
- It then asks for access to a series of settings, in particular "Accessibility".
- Once that is allowed, the malware can change permissions and settings on the phone, "ultimately giving the scammer full access to the device."
The NCSC says the same malware can be disguised in other ways, including as a banking app, so the job-seeker version may not be the only one around.
Warning signs
The NCSC says to be wary if:
- a job offer or recruitment message arrives out of the blue, especially on social media
- you are quickly asked to move the conversation to another platform
- you are asked to download an app before you have had a proper conversation with the employer
- you are pushed to act fast
"If a job opportunity seems too good to be true, or you're asked to download an app before you've had a proper conversation with an employer, take a moment to verify the request is legitimate before proceeding," it says.
One way to check is to find the company's own website or phone number yourself, rather than using the contact details in the message.
How to protect your phone
The NCSC's advice:
- only install apps from the Apple App Store or Google Play Store
- do not download apps from links sent in texts, social media messages or messaging apps
- leave Android's "Installation from Unknown Sources" setting turned off. Android disallows sideloading by default, and the NCSC recommends never enabling it
- keep your phone and apps up to date, use strong, unique passwords and turn on multi-factor authentication where you can
If your phone starts behaving strangely, becomes unresponsive or shows unexpected update screens, stop using it and get advice from a trusted IT provider, the NCSC says.
What to do if you installed it
The NCSC says to act quickly, because the sooner you do, the better your chance of limiting any financial loss:
- contact your bank straight away if your financial information may be at risk
- change your passwords, starting with email and banking, and any other accounts used on the device
- run a security scan if you can
- contact your mobile provider if you think the phone has been compromised
- report the scam to the NCSC
Uninstalling the app may not be enough, because it can install more malware. The NCSC points to Own Your Online's guide to backing up and cleaning a device, including a factory reset, which it says is more likely to remove the malware. After a reset, only reinstall apps you recognise and trust.
Not the only scam doing the rounds
Earlier this month, Auckland Chinese restaurants were hit by an offshore booking and abalone scam.
For international graduates looking for a first job, our story on why the first job is so hard to get looks at what is going on in the market.
