Sergio Medeiros

“LinkedIn Easy Apply” isn’t just a hiring shortcut. It’s an attack surface. In the latest episode of Fraud Forward, Hailey Windham, CFCS sits down with Jared G., fraud investigator and author, to unpack a growing fraud vector hiding in plain sight: fake LinkedIn companies using job posts and “pre-interview” screening emails to harvest operational intelligence from fraud, AML, and compliance teams. Fraudsters aren’t just phishing customers anymore. They’re interviewing fraud teams to steal the playbook. Listen as they get into: • How impersonated companies use Easy Apply + fast follow-ups to lure candidates • The telltale signals: new domains, fake employee rosters, zero posting history, suspicious hiring volume • Why fraud resumes and interview answers are uniquely valuable to attackers • How “legitimate” technical screening questions become playbook extraction • What criminals can do with aggregated responses (vendor mapping, control probing, tactic tuning) • Practical steps to protect fraud knowledge like you protect systems The core takeaway: Protect knowledge like infrastructure, and build safer ways to share patterns without handing attackers a blueprint. 🎙WATCH the full episode and subscribe on YouTube: @FraudForward ▶️ LISTEN on your favorite podcast provider via https://lnkd.in/eeTDSvSc Guest lineup: -Jared Gruenberg: Fraud investigator and author of “Your Fraud Team Is Leaking Your Defense Playbook Right Now” -Hailey Windham, CFCS: Host of Fraud Forward and Community Banking Lead at Sardine

44

2 Comments

Cybercriminals often bypass technical defenses by targeting employees through sophisticated social engineering attacks and phishing scams. A robust security strategy must include ongoing employee training and attack simulations to build a human firewall.

1

If we have a firewall, we’re secure.” We hear this all the time. But modern cyberattacks don’t work the way most people think they do. They rarely break through your security. They just find another way in. I made a quick video to show exactly what I mean. Worth a watch. #CyberSecurity #NetworkSecurity #EmailSecurity #EndpointSecurity #CyberAwareness #CyberRisk #BusinessSecurity #DigitalTransformation #TechLeadership #PapuaNewGuinea #PacificTech #PacificBusiness #PNG #CyberResilience #SprintNetworks #papuanewguinea #fiji #solomonislands

48

✖️ THE SOAR MATH AIN'T MATHING ➗ Let's say you pay your SOC analyst $85k/year, and they triage 12 alerts per hour at 70% efficiency with a SOAR platform. Your alert cost probably is somewhere between $2.50 and $4.00. ➕ Every integration = build time + ongoing fixes ➕ Every detection change = playbook edits + QA ➕ Every API change = broken workflows ➕ Every edge case = analyst time + escalation All these inefficiencies add up and are costing more than you think. 🔗 Learn more about the hidden cost of SOAR in our latest blog post: https://lnkd.in/gqWnxk6r

10

𝐍𝐨𝐭𝐞 𝐭𝐚𝐤𝐢𝐧𝐠 𝐢𝐧 𝐎𝐒𝐈𝐍𝐓 𝐜𝐚𝐧 𝐛𝐞 𝐩𝐚𝐢𝐧, 𝐛𝐮𝐭 𝐰𝐡𝐲 𝐬𝐡𝐨𝐮𝐥𝐝 𝐢𝐭 𝐛𝐞? I’m recording a video showing you how you can use Forensic OSINT to make digital notes to support your OSINT investigation. It's a simple and accessible way to make notes to support your file work. Video coming soon 👀

27

1 Comment