Live data from Hacker News

I almost got hacked by a 'job interview'

blog.daviddodda.com

51–60 of 534 posts

Re: I almost got hacked by a 'job interview'

#51
post #43
post #16

The pseudonym "Mykola Yanchii" on LinkedIn [1] doesn't look real at all. Click "More" button -> "About this profile", RED FLAGS ALL OVER. -> Joined May 2025 -> Contact information Updated less than 6 months ago -> Profile photo Updated less than 6 months ago Funny things, this profile has the LinkedIn Verified Checkmark and was verified by Persona ?!?! -> This might be a red flag for Persona service itself as it migh…

How am I supposed to become a real, trustable person on LinkedIn if I'm not already there?

Create an account and let it age.

Seasoned accounts are a positive heuristic in many domains, not just LinkedIn. For example, I some times use web.archive.org to check a company's domain to see how far back they've been on the web. Even here on HN, young accounts (green text) are more likely to be griefing, trolling, or spreading misinformation at a higher rate than someone who has been here for years.

Re: I almost got hacked by a 'job interview'

#52
post #7

The article never really addresses if it was a totally fake setup or a real crypto company scamming interviewees. Does "Symfa" exist? Does the "Chief Blockchain Officer"?

> or a real crypto company scamming interviewees

A real company wouldn't be scamming candidates.

It could be a real company where someone hijacked an e-mail account to pose as someone from the company, though.

Re: I almost got hacked by a 'job interview'

#53
I've gotten my fair share of fake job interview emails. I don't think any have ever tried to get me to download/run some code. Mostly, I think they are just trying to phish for information or get me to join their Slack.

I remember replying to a "recruiter" that I thought was legit. I told him my salary requirements and my skill set and even gave him a copy of my resume. I think that was the "scam" though. I gave a pretty highball salary and was told that there was totally a job that would fit. I think he just wanted my info and sharing my resume (with my email & phone) was probably want he wanted. I'm not sure if that lead to more spam calls/emails, but it certainly didn't lead to a job.

The worst is I get emails from people asking to use my Upwork account. They ask because their account "got blocked" and they need to use mine or they are in a "different country" and thus can't get jobs (or get paid less). Usually they say that they'll do the work, but they need to use my PC and Upwork account, and I'll get a cut.

Obviously, those are fake. There's no way I'm letting someone use my account or remote into my PC for any reason.

Re: I almost got hacked by a 'job interview'

#55
post #38

I had someone who was targeting junior developers posting on Who Wants to Be Hired threads here on Hacker news. They reached out saying they liked my projects and had something I might be interested in, then set up an interview where they tried to get me to install malware.

Name and shame. It's the only way to help others.

Unfortunately there is not much to name. Someone going by Xin Jia reached out to me over email saying they had seen some of my work and that they had something similar they were working on and asked if I'd like to meet to discuss. He sent me a calendly link to schedule a time. The start of the meeting was relatively normal. I introduced my background and some things I am interested in.

It became clear that it was a scam when I started asking about the project. He said they were a software consulting company mostly based out of China and Malaysia that was looking to expand into the US and that they focused on "backend, frontend, and AI development" which made no sense as I have no experience in any of those (my who wants to be hired post was about ML and scientific computing stuff). He said as part of my evaluation they were going to have me work on something for a client and that I would have to install some software so that one of their senior engineers could pair with me. At this point he also sent me their website and very pointedly showed me that his name was on there and this was real.

After that I left. I'll look for the site they sent me but I'd imagine it's probably down. It just looked like a generic corporate website.

Re: I almost got hacked by a 'job interview'

#58

> The scary part? This attack vector is perfect for developers. We download and run code all day long. GitHub repos, npm packages, coding challenges. Most of us don't sandbox every single thing. Embedded into this story about being attacked is (hopefully) a serious lesson for all programmers (not just OP) about pulling down random dependencies/code and just yolo'ing them into their own codebases. How do you know your…

I go to the repo and get a feel for how popular, how recent, and how active the project is. I then lock it and I only update dependencies annually or if I need to address a specific issue.

Risk gets managed, not eliminated. There is no one "correct" approach as risk is a sliding scale that depends on your project's risk appetite.

Re: I almost got hacked by a 'job interview'

#59
post #4

I’ve grown to depend on little snitch for this sort of thing. Always run in either Alert or Deny mode. It is a little wild how many things expect to communicate with the internet, even if you tell them not to. Example: the Cline plugin for vscode has an option to turn off telemetry, but even then it tries to talk to a server on every prompt, even when using local ollama.

Yep, Malwarebytes WFC really eases my mind.

Re: I almost got hacked by a 'job interview'

#60

I had someone who was targeting junior developers posting on Who Wants to Be Hired threads here on Hacker news. They reached out saying they liked my projects and had something I might be interested in, then set up an interview where they tried to get me to install malware.

HN has harbored fugitive hackers knowingly, this does not surprise me at all.

- people post because they want to be hired

- info is public

- random person reaches out with public info

- ???

- HN harbours fugitive hackers

Post reply on HN