惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

L
LangChain Blog
Recent Announcements
Recent Announcements
GbyAI
GbyAI
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Microsoft Azure Blog
Microsoft Azure Blog
N
Netflix TechBlog - Medium
人人都是产品经理
人人都是产品经理
MongoDB | Blog
MongoDB | Blog
D
DataBreaches.Net
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
WordPress大学
WordPress大学
U
Unit 42
腾讯CDC
D
Docker
The GitHub Blog
The GitHub Blog
阮一峰的网络日志
阮一峰的网络日志
Vercel News
Vercel News
I
InfoQ
Jina AI
Jina AI
爱范儿
爱范儿
宝玉的分享
宝玉的分享
博客园 - Franky
G
Google Developers Blog
P
Proofpoint News Feed

New York Post

Federal officials order flight cuts at Chicago O’Hare to reduce airport delays Minnesota dad who shoved Turning Point USA journalist at anti-ICE protest says family is 'absolutely not violent' Former adult film star Asia Carrera makes career turn after passing Texas bar exam to become attorney Boy, 13, stabbed with large knife during suspected dispute near NYC park Over 200 swarm Atlanta intersection in illegal street takeover roaring with cars racing and doing donuts Yankees' Aaron Boone blasts 'overly sensitive' umpires after first ejection of season Stream It Or Skip It: 'Fake Profile' Season 3 On Netflix, Another Crazy Season Of The Steamy Colombian Thriller Eastbound 105 Freeway reopens hours after man shot as mystery deepens around what happened Tony Bradley believes Hawks need to hit Knicks 'in the mouth first' A quiet change at a Sacramento school is raising concerns among parents Washington state teacher flashed topless pics to class full of students during PowerPoint presentation Knicks looking to push NBA-best clutch success to its limit in playoffs Stream It Or Skip It: 'Beef' Season 2 On Netflix, Where A Young Couple Take On Their Boss And His Wife When They Witness A Vicious Argument Footage shows D4vd arrested surrounded by gun-wielding cops Acting ICE Director Todd Lyons resigns after 20 years with agency -- will stay on for transition 'Proof' review: Ayo Edebiri and Don Cheadle star in underpowered Broadway revival Federal authorities issue warning after multiple drone sightings above Coors Field Ohio State dominant school at receiver with latest star set for NFL draft 'The Pitt' Season 2 Ending Explained: Does Baby Jane Doe Save Dr. Robby? SoCal man's bittersweet reunion with stolen 1969 Camaro caught on camera Dem rising star boasts about Fed experience -- but record tells different story Luka Doncic spotted in Europe at Real Madrid basketball game with tennis superstar Pregnant Aubrey Plaza flaunts her baby bump in floral minidress at NYC screening ‘The Pitt’ Season 2 Episode 15 Recap: 100 Percent F**ked Up (Season 2 Finale) ‘Shahs of Sunset’ star Mercedes ‘MJ’ Javid reveals how she found a fresh start amid divorce Deonte Banks gets Giants 'clean slate' at critical point in his NFL career Mets can't hide behind the numbers — they're feeling the pressure Tiffany & Co. Blue Book 2026 launch: Mariah Carey, Naomi Watts, Teyana Taylor and more Hannah Einbinder Couldn't Stop Bawling While Jesse McCartney Was On Set Filming 'Hacks' Episode 2: "I Cried Every Single Take" The PGA Tour reunions that must happen with LIV Golf on life support
Scammers are sneakily using a Google tool to target job h...
Brooke Steinberg · 2026-05-04 · via New York Post

These scammers are getting smart.

There’s no denying that today’s job market is horrid, as the unemployed are struggling to not only get a job offer but to land a single interview.

As eager as job hunters may be, experts advise them to be wary when an “opportunity” pops into their inboxes, as scammers are hijacking accounts by posing as talent recruiters and using a Google tool to make fishy job offers seem legitimate.

“Unfortunately, recruiter scams are becoming increasingly prevalent and harder to spot in today’s technology-enabled job market,” Amanda Augustine, resident career expert for resume.io and a Certified Professional Career Coach (CPCC), told The Post.

The email — which will appear from noreply@appsheet.com — is professionally written and offers a job opportunity that closely matches the recipient’s background.

Scammers most likely comb through LinkedIn and previous data breaches to find email addresses of those looking for a job, according to KSBW.

Because AppSheet, a no-code application powered by Google that allows users to build custom apps without any coding, is a part of the Google Workspace suite, emails from the tool are often delivered to inboxes and are almost always considered safe — which is exactly what the attackers are exploiting.

Several people on social media have reported receiving these emails. Most of them have similar wording and impersonate recruiters from major brands, including Meta, Adobe, Disney, Coca-Cola, Spotify, Christian Dior and L’Oréal, to name a few.

“I am reaching out regarding a unique project-based collaboration with Adobe for the position of Marketing Manager. Your impressive background in campaign management aligns well with the dynamic expertise we are looking for on this initiative,” one email read, a user shared on Reddit.

An email from "Meta | Careers " with the subject line "Dear [redacted name]," offering a Head of Digital Marketing position.
Scammers are impersonating talent acquisition from major brands and companies, including Meta, Adobe, Disney, Coca-Cola, Spotify, Christian Dior, L’Oréal and so on. Reddit

The responsibilities listed tend to be very broad and “not tailored to the specificities of the company,” another Reddit user who received one of the scam emails noted.

Victims who fall for these bogus opportunities will often click the link in the body of the email and will be directed to a fake job portal where they are led through several counterfeit application pages before landing on a phishing site that prompts them to log in via their Facebook accounts to “proceed with the application.”

That page gives attackers access to personal information and login credentials, potentially allowing them to take control of the victim’s account and install malware.

One LinkedIn user shared that when she received this type of email from Adobe, she was suspicious and reached out to the company to check its legitimacy. She was told by an Adobe employee, “There should be a recruiter name at the bottom, and a calendar link, so no, not from us.”

In the comments, another shared that they were also doubtful about an email they supposedly got from L’Oréal, writing, “It was very convincing, but also seemed too good to be true so I did a little research before replying. Beware!”

Like these almost-victims, Augustine recommends, “Trust your gut: if an opportunity seems too good to be true, it likely is. That could look like a high-paying role with vague responsibilities, little information about the company, or no clear requirements for the candidate.”

The tricky thing is that hackers don’t use mispelled, funky-looking fake emails. Instead, they’re using a legitimate @appsheet.com address originating from Google’s mail servers.

However, a legitimate recruiter will use a company email address that matches the organization’s domain — not a no-reply address, Augustine pointed out to The Post.

She said that people shouldn’t take the display name at face value either, since it may look legitimate, but the actual email address proves otherwise.

It’s also a red flag if the email doesn’t include an identifiable contact person, job location or link to the role on the company’s official website.

“It’s always worth doing a bit of due diligence before responding to the message. Look up the recruiter on LinkedIn and confirm they actually work for the company they claim to represent; you should see a complete profile and connections to other employees. If anything feels off, go directly to the company’s careers page rather than clicking on links in the message,” the expert advised.

Hands typing on a laptop with an application form on the screen.
Victims will be directed to a fake job portal that will brings them through a series of fake application pages before landing on a phishing site. Deemerwha studio – stock.adobe.com

Google told The Post that they’re aware of the AppSheet scam and they’ve added safeguards for users.

“We are aware of these phishing campaigns and have taken action to block the accounts and apps violating our policies. We have also implemented additional automated protections to detect and prevent similar abuse of AppSheet’s communication features,” a Google spokesperson said.

“While our systems successfully block more than 99.9% of spam, phishing, and malware, we encourage users to remain vigilant. We recommend reporting any suspicious emails as ‘phishing’ within Gmail, which helps our AI models better identify and block evolving tactics in real-time.”

According to Google, AppSheet uses a layered defense that includes account verification, rate limiting on outgoing communications and content scanning, which are “strong and effective protections.”

Google advised users to use the “Report Phishing” button in Gmail if they receive one of these messages.

Additionally, they suggest verifying the source, noting that high-value job offers usually come from a corporate domain rather than a generic automation service, in addition to hovering over “apply” buttons and links before clicking them, since job applications rarely redirect through a series of intermediate URL shorteners.

“Remember, a legitimate employer will never ask you to send money, share bank account details, or provide sensitive information before you’ve gone through a formal interview process,” Augustine added.

“When in doubt, take a step back and verify before you respond; a few extra minutes of research can save you from a much bigger problem.”