They submitted a deep fake photo and never did a call.
To prevent a repeat, KnowBe4 is advising its peers in the industry to consider interviewing prospective employees on a video call to ensure they’re real
Ohh cool. Some of our security training is from them. Always seemed to be the most basic stuff too. Pretty awful they couldn’t take the most basic step to ensure a person is who they say they are.
Holy shit, this is classic. The next time I let my ADHD get the better of me and I accidentally click on a link in a spoof phishing email (and, yes, try to log in to whatever account they told me there was a problem with because I’m an idiot, you’re so perfect, shut up) sent as a test by the IT department which results in them requiring me to take some KnowBe4 refresher course, I’m sending them this article and telling them “This one is a freebie.”
Oh lol, my company is/was using them to produce testing phishing emails to determine if employees can spot them. It is quite ironic they fell for the ultimate phish.
They didn’t do one in this case, but I have heard stories of these sorts of malicious actors paying people stateside or elsewhere to take the video interviews. I’ve had to do ID checks on video in recent-ish interviews.