How to spot fake job offers aimed at tech leaders

Juan Molina ·

A Malwarebytes report exposes fake “Meta Careers” pages that steal credentials; here is how to protect your career.

Imagine you get a LinkedIn message from a supposed Meta recruiter inviting you to look at an “exclusive opportunity” for a VP of Engineering role. The link leads to a page that mimics the official “Meta Careers” portal and asks you to sign in with your Facebook or Google account. Malwarebytes documented exactly this kind of fake page on Calendly, designed to steal the credentials of senior professionals (Malwarebytes, October 14, 2026). Before you share any information, it pays to go through every warning sign.

How the scammers operate

Attackers build sites that copy the visual identity of large tech companies and spread them through direct messages, emails or even paid ads on professional networks. Their goal is not just to get a résumé but to capture login credentials for corporate accounts, code repositories or cloud platforms. By using look-alike domains (for example, “meta-careers‑jobs.com” instead of “careers.meta.com”) and identical login forms, they get even very experienced professionals to lower their guard. Malwarebytes notes that these campaigns specifically target senior profiles because their access is worth more (Malwarebytes, October 14, 2026).

Warning signs in the message

  1. Unverified sender: the message comes from a personal LinkedIn account or a generic email address (gmail, outlook) instead of an official corporate domain.
  2. Artificial urgency: phrases like “immediate response” or “limited spots” are meant to make you act without checking.
  3. Shortened links or odd subdomains: hover over the link before clicking; the real URL often reveals a domain unrelated to the company.
  4. A request for credentials at first contact: no legitimate company asks for a username and password before a formal interview.
  5. Spelling mistakes, sloppy formatting or outdated branding: attackers take care with details, but traces of generic templates often remain.

What to do this week

  • Review your latest recruiter messages and verify the sender's domain before replying.
  • Turn on two-factor authentication for all your professional accounts (GitHub, AWS, LinkedIn, corporate email).
  • Set up security alerts in your browser so it warns you about known phishing sites.
  • Share this list with your senior network; collective prevention shrinks the attack surface.
  • If you spot a suspicious page, report it to the security team of the company being impersonated and to the platform where you found it.