You Open Attachments From Strangers for a Living.

My first job is to protect you.

My second job is to make you money.

How search firms get robbed

Recruiting is the only profession where opening unsolicited files from unknown people is the core job function. Hackers noticed and they have your number.

The poisoned resume

Attack groups apply to real jobs with fake resumes that install backdoors. Their own playbooks name recruiters as the target, because opening attachments is the job.

The fake candidate

Stolen identities, deepfaked interviews, laptop farms. You place them and collect the fee, and your client just hired a foreign operative.

The rerouted fee

Someone reads your inbox for weeks, waits for an invoice to go out, then sends “updated banking details” from your own address.

The database you’re sitting on

Comp data, addresses, sometimes SSNs, every fee agreement you’ve signed. A hacker sees a payday behind weak locks.

The shared password

Shared logins, high turnover, ex-employees with working credentials. Infostealers harvest the rest and sell it for pennies.

The AI leak

Candidate PII pasted into free chatbots with training turned on is out of your custody forever. And hidden instructions inside resumes now target the AI tools screening them.