I almost got hacked by a 'job interview'

Re:I almost got hacked by a 'job interview' by input_sh on Wednesday October 15, 2025 @11:26AM (#45594035)

You just verify that you have access to an email address that belongs to a company (@example.com) by entering a six digit code they send to your work email. This in theory verifies that you work there, but obviously nothing else like your actual position at the company.

From an attacker standpoint, if an attacker gains access to any email address with @example.com, they could pretend to be the CEO of example.com even if they compromised the lowest level employee.

[ Parent | on HN ]

Re:I almost got hacked by a 'job interview' by devy on Wednesday October 15, 2025 @11:59AM (#45594584)

This is a optional/invite only feature. LinkedIn doesn't provide that work email validation feature for all employers on their platform. Why did I know that? Because my past startup was requesting LinkedIn to enable that so that we can enable that feature but they said it's an invite only feature. Internally, I think they are only invite those employers who has certain amount of employees and/or revenues to turn it on.

Apple / Google developer program uses Dun&Bradstreet to verify company and developer identities. That's another way. But LinkedIn doesn't have that feature (yet).

[ Parent | on HN ]

Re:I almost got hacked by a 'job interview' by reaperducer on Wednesday October 15, 2025 @06:20PM (#45599003)

You just verify that you have access to an email address that belongs to a company (@example.com)

Bad idea.

I never had my work e-mail address on LinkedIn, but then I made the mistake of doing this, and LinkedIn sold my work e-mail address to several dozen companies that are still spamming me a year later.

[ Parent | on HN ]