Google tries to hire our app

Posted by phwizard on Friday March 18, 2016 @02:06PM
from the self-post dept.

has anyone got messages like this?

it seems Google is parsing through Github or something, anyway found amusing:

===== Hello Q-municate powered by QuickBlox,

I was wondering if you would be open to confidentially exploring engineering opportunities with Google.

As you know, Google is back in the Virtual Reality Competition and we are forming our dedicated division for virtual reality computing.

So we created a private competition to find promising talent, the detail is in the attached document.

Thanks and I look forward to seeing you in the competition!

Best Regards, XXXXX XXXXX

Software Engineer Recruiter (XXX) XXX-XXXX =====

( 10 comments | 7 points | on HN )

Re:Google tries to hire our app by EdwardMSmith on Friday March 18, 2016 @02:56PM (#11314002)

Unsolicited email with attached document is almost certainly a virus.

[ Parent | on HN ]

Re:Google tries to hire our app by teleavenger on Friday March 18, 2016 @03:08PM (#11314093)

I agree with EdwardMSmith, it's probably a virus. However, if you're still curious (which I am), I would open it inside a cordoned off virtual box just to make sure.

[ Parent | on HN ]

Re:Google tries to hire our app by MalcolmDiggs on Friday March 18, 2016 @09:57PM (#11316836)

I'm curious, what domain was the email sent from?

In my experience, google recruiters email from "@google.com" addresses, and the emails are both "signed by" and "mailed by" google.com (indicating the DKIM and SPF check out).

If that's all true of this sender, it might be worth taking seriously.

[ Parent | on HN ]

Re:Google tries to hire our app by phwizard on Monday March 21, 2016 @06:20AM (#11327122)

No this one was sent from govr2016.com domain which may be legit or not, but certainly there is no proof it's connected to Google. Domain doesn't resolve to any website

[ Parent | on HN ]

Re:Google tries to hire our app by twistedmack on Friday March 18, 2016 @05:51PM (#11315456)

I got the same e-mail today. Upon trying to open the file within a virtualized container there is a word document. Opening the word document without macros enabled I get.

THIS FILE IS PROTECTED WITH RSA KEY PLEASE ENABLE CONTENT TO SEE THIS DOCUMENT

[ Parent | on HN ]

Re:Google tries to hire our app by twistedmack on Friday March 18, 2016 @06:13PM (#11315620)

The DKIM-Signature isn't correct. They do not use sha1. This a fishing attack vector in my opinion.

DKIM-Signature: v=1; a=rsa-sha1;

[ Parent | on HN ]

Re:Google tries to hire our app by twistedmack on Friday March 18, 2016 @06:21PM (#11315672)

Virustotal indicates the attachment has a virus.

[ Parent | on HN ]

Re:Google tries to hire our app by phwizard on Monday March 21, 2016 @06:22AM (#11327134)

Thanks for checking. I tried opening it in Word (Mac) and only saw that RSA text.

[ Parent | on HN ]

Re:Google tries to hire our app by JSeymourATL on Friday March 18, 2016 @03:48PM (#11314398)

> Software Engineer Recruiter (XXX) XXX-XXXX =====

Check Linkedin, see if his profile looks legit.

You might also actually ring him and chat him up, it's Friday.

Tell him if Sergey is serious, then ping me direct. :)

[ Parent | on HN ]

Re:Google tries to hire our app by ramenmeal on Friday March 18, 2016 @03:08PM (#11314094)

Some sort of fishing.

[ Parent | on HN ]