To follow up on the earlier thread, the impersonation of AECOM HR part 2 continues with the malicious actors respond to my reply.

I had responded to the threat actor, providing availability for a conversation. The threat actor responded with the questions below at 0331 AM PT 2026-02-04. This should have been a big tell for me as the spoofed HR persona is located in Portland, OR and not likely working in the middle of the night.
Then when I had not responded, they replied to the same email thread with the same content at 1737 PM PT 2026-02-04. This is what triggered my further analysis and recognized the miscreant at work.
I posted the IOCs and details on my Github:
https://github.com/obrientg/Analysis/blob/main/2026%2002%2004%20Impersonation%20of%20AECOM%20HR%20part%202

#jobsearch #fraud #impersonation #informationsecurity #abuse #risk #riskmanagement #gethired #hiring #threatintel #IOC #IOCs #gethired #hiring #threatlandscape #getFediHired #threatInteligence #cybersecurity #phishing

Impersonation of AECOM HR - The malicious actors continue to target individuals on the search for their next job.

Yesterday I spent the afternoon writing up a response to (what I thought) a reach out by AECOM for potential roles with the company. Having crafted thoughtful responses to the questions, I went to reply –

And realized this was fake. This is a scammer.

The tell-tale signs I missed at first:
· The name not matching the email address
· Weird subject line
· The email coming from GMail rather than their aecom.com domain
· The work signature block including a LinkedIn profile URL
· Email interaction tracking URL

This sample was specifically targeted as they pulled background from LinkedIn regarding my background and experience, hence my blocking the other telltale signs.

These threat actors are using mailsuite [DOT] com a Gmail plugin to track their targeted individuals (aka the u.list-opt-center [DOT] com URL). This appears to be a legit service being used for malicious activities. I have reached out to Mailsuite but have not received a response.

They are impersonating a pamlevesque [AT] aecom.com; I have reached out on LinkedIn Pam Levesque to warn them & connect with their abuse team but have not received a response. I also reached out to multiple other individuals in InfoSec/Risk/Abuse roles at AECOM with no response.

#jobsearch #fraud #impersonation #informationsecurity #abuse #risk #riskmanagement #gethired #hiring #threatlandscape #getFediHired #threatIntel #threatInteligence #cybersecurity #phishing

The full documentation of the initial interaction is on my Github:
https://github.com/obrientg/Analysis/blob/main/Impersonation%20of%20AECOM%20HR%202026Feb-3

and my #Linkedin posting:
https://www.linkedin.com/posts/activity-7425234187286351872-z1Wx
#stinkedin

I'm a senior software developer who is proficient in #ruby #elixir #sql #java #linux #clang #javascript #python #postgresql #postgis #mqtt #rabbitmq

I search for a #job and I reside currently in #austria #vienna and I'm fluent in #german and #english

I love #foss #opensource and #rest #api

Let's #getfedihired #gethired #hiring

I am tired of being broke by the end of the month, so please help me find a job.

I am looking for a Entry Level Remote Data Entry job.. I have never really done any data entry in my life, but as I live in the suburbs in New Jersey in the United States, and do NOT drive… most other jobs are pretty much off limits to me. I have experience using Excel (and Excel like programs), word processors, and computers. If you are looking for someone to do some data entry work I am willing to send you my resume. Just direct message me, and I will email you my resume.

I am looking for a Entry Level Remote Data Entry job.. I have never really done any data entry in my life, but as I live in the suburbs in New Jersey in the United States, and do NOT drive… most other jobs are pretty much off limits to me. I have experience using Excel (and Excel like programs), word processors, and computers. If you are looking for someone to do some data entry work I am willing to send you my resume. Just direct message me, and I will email you my resume.

Really getting tired of running low on funds by the end of each month, because I am reliant on both social security income and food stamps. I would love a remote data entry job... so I don't have to go through this again next month. DM me if you are hiring for a remote data entry job! #GetFediHired #GetHired #JobHunting

RE: https://catgirl.center/notes/ah9956oraljq011e

Today we had the meeting zero (0) of our Never Search Alone Job Search Council 5160, while being the moderator/facilitator.

After doing the program, now I get to share my knowledge and experiences with my council members will be great.

Never Search Alone book: https://www.neversearchalone.org/

Job Search Councils: https://www.neversearchalone.org/join-jsc

The "job search cult" is not a surefire way to get a job, but definitely helped me to quantify what I am looking for and how to communicate that goal.

#neversearchalone #NSA #jobsearchcouncil #JSC
#getFediHired #gethired #infosec #ciso #hiring #fedihired

Dear Cupid,

Can you please aim a quiver's worth of arrows at some companies so they would send me job interview invites? Please. I'm a lonely heart still looking for work (in all the wrong places), but no one is sharing the love. I know a variety of languages like English, French, #C, #Erlang, #C#, #Java, or #NodeJS. Been looking to #Go polish some #Rust too. I make for a great work date on any flavour of #BSD or #Linux, but #NoAI (it never works like in the commercials and eats batteries galore).

Send me a job love letter for Valentine's Day, please?

http://www.snert.com/resume/

#GetHired #GetFediHire #JobSeek #FediHire

I really NEED a remote, entry level, data entry job! Please help me get hired! I live in New Jersey in the United States, don't drive (so I am 100% reliant on Lyft to get around), but I am very skilled with excel/programs like Excel, and other programs akin to Microsoft Office. Please DM me if you are looking for a part time data entry person. #GetFediHired #GetHired #JobHunting


RE: https://catgirl.center/notes/ah9956oraljq011e

RE: https://catgirl.center/notes/ah9956oraljq011e

I'm looking to move to the Netherlands and have a valid passport, though I need a sponsored work visa. I'm a monolingual English speaker with 9 years of customer service experience and am also proficient in computer use. I can't be out to sea for weeks at a time due to other obligations, I don't intend to get a car, and I will need the shift I work to be consistent.

I'm reaching the character limit, so message me for any additional information.

#gethired #getfedihired #netherlands

I am still looking for a remote entry level data entry job. Please help me find a job by boosting the quoted post https://catgirl.center/notes/ah9956oraljq011e

#GetFediHired #GetHired #JobHunting

RE: https://catgirl.center/notes/ah9956oraljq011e

Dear Santa,

I know you're busy and that its a little late in the season to add to your list, but I would really really like a new #C, #Erlang, #C#, #Java, or #NodeJS (or a simple #Rusty thingy) job for Xmas. On any flavour of #BSD or #Linux will be fine, but #NoAI (it never works like in the commercials and eats Ray-O-Vac batteries galore).

I've been a good boy all year. My code reading and debugging skills continue to get stronger. I even won in @ioccc 28 this summer.

http://www.snert.com/resume/

PS. Santa are your elves hiring by any chance? #Remote works, though I think I'm only a short drive from the North Pole (if mummy lets me have the car) .

#GetHired #GetFediHire #JobSeek

Failing that, I'll just have to share my creative work online after. Along with older material.

#GetFediHired #GetHired

I guess one reason I love programming and cooking is that I create things for others to enjoy.

#GetFediHired #GetHired #C #Erlang #Forth #NodeJS #Food #Pizza

While trying to #GetHired for 2+ years, I've learned how to make Neapolitan pizzas along with breads and cookies to save money. I've learned other new recipes for dishes too. I doubt I'd ever work as a chef, but I eat well.

I have a 2yo Yorkie puppy now; in the warm months we walk a lot and I work on his training, so maybe a Pizza Delivery Dog Walker job?

Back in the day between jobs in South of France, I did field support for all the English/German/Swedish ex-pats and French in the region, resolve dial-up/ ISDN/ ADSL issues or fixing Windows 95/98/Me/2000/XP (usually lengthy format/re-install process). These days I keep that knowledge of computers secret, else someone asks for help.

I've taught 8-12 yo Judo; mentored juniors in the office; done some amateur Improv comedy. I doubt I'd find work as Improv Judoka Teacher.

I study skills like Rust (maybe Go next, though I play Go better). I keep my mind busy by volunteering time to the @ioccc infrastructure team. Doubt I'd find work as a Rusty "Go IOCCC!" cheerleader.

I know @nixCraft your posed question was somewhat in jest, but this time trying to finding work in my field I've loved since I was 13 has been hard this cycle: stress'n'tears, along with good food and a gag (not on the food). Living on puppy cuddles and licks (not just likes).

Still looking for Software Developer work in Canada. http://www.snert.com/resume/

#GetFediHired

Tech recruitment is bonkers. I get interviews for jobs that I apply for but am not totally qualified to do (in a boom period this wouldn't be a blocker, and I'd quickly learn what I need to know anyway, but yeah, it is trickier in these risk-averse times, but I know what I *want* to do), but much fewer (grammar!) interviews for roles I can do (a) really well (ie. documentation) and (b) demonstrate I can do really well #gethired #getfedhired

If anyone is looking for a rust developer for a remote position please let me know. I’m looking to transition from traditional engineering to software engineering. I’m more than happy to share my email and resume.

#fedihired #rust #gethired

@krusynth Wrong answer only

New US Gov probably don't want you use buzz words such as AI, crypto, blue sky, thought showers.

Instead, write your resume in machine code.

#getHired