The National Information Technology Development Agency (NITDA) has alerted the public to a job scam circulating on LinkedIn, warning of a malware called “CovertCatch” that cybercriminals are using to target unsuspecting individuals.
This threat impacts sectors such as defense, media, technology, and academia through fake job offers crafted to lure users into downloading harmful files.
Disguised as recruiters, these threat actors encourage LinkedIn users to click links or download files, which then introduce CovertCatch malware into their systems.
Once active, the malware operates covertly, capturing keystrokes, recording screen activity, and stealing sensitive data.
The agency noted that this could lead to severe outcomes for both individuals and organizations, including financial losses, reputational harm, and potential data breaches.
NITDA urged caution with unsolicited job offers on LinkedIn, particularly those involving file downloads or redirection to external websites.
The agency also recommended that organizations regularly monitor for unusual login patterns, enable Multi-Factor Authentication (MFA), maintain updated antivirus protections, and audit LinkedIn connections to safeguard sensitive data.
