Alert Summary

Incident ID: IA-001

Vector: Unsolicited Email / Fraudulent “Technical Assessment”

Risk Level: HIGH (Financial Fraud & Credit Card Harvesting)

Status: ARCHIVED

This alert identifies a sophisticated predatory network (operating under names like Skivyy and Baishi) that targets job seekers with unsolicited “Application Status Updates.” The operation leverages professional terminology to pressure candidates into paying a non-refundable $35 fee for a mandatory technical assessment—a clear violation of ethical hiring standards.

---

Target / Method / Ultimate Goal

• Target: Active job seekers with resumes visible on public boards (IT Support, Analysts, Admin).
• Method: Pressure-Induced Monetization. Sending an invitation for a role never applied for (e.g., “Remote IT Support Associate”) and demanding an immediate “Assessment Fee” to proceed.
• Ultimate Goal: Direct financial theft of $35+ and the harvesting of active credit card data for secondary fraudulent use.

---

VETTICA Analysis: 3 Critical Policy & Technical Failures

1. Infrastructure Failure: The WHOIS Discrepancy

A professional platform’s digital footprint should match its claimed legitimacy.

• Forensic Finding: WHOIS data for the Skivyy domain showed a registration date of August 2025—just 90 days prior to the “global” recruitment push.
• VETTICA Verdict: CRITICAL FAILURE. A “vetted” professional platform operating on a “burner” domain launched less than three months prior is a primary indicator of a temporary fraud operation.

2. Financial Policy Failure: The “Pay-to-Play” Violation

This is the non-negotiable compliance failure that validates the scam.

• Hiring Ethics Violation: Legitimate employers—especially in the IT and ServiceNow ecosystem—do not charge candidates for background checks, training, or assessments during the screening phase.
• VETTICA Verdict: IMMEDIATE FAILURE. Demanding a fee violates standard GRC (Governance, Risk, and Compliance) hiring frameworks and signals a financial trap.

3. Community Intelligence Failure

Cross-referencing intent via external threat intelligence.

• Forensic Finding: Multiple external data points confirmed the “Technical Assessment Fee” as a consistent, repeatable fraudulent scheme used to extract money from job seekers.
• VETTICA Verdict: SYSTEMIC FAILURE. The operation is a known predatory network designed to exploit the current job market’s high-pressure environment.

---

VETTICA Action Plan: Protect Your Professional Perimeter

• Enforce a “Zero-Fee” Policy: If a recruitment process requires a credit card before a live human interview, terminate the session immediately.
• Audit the Domain: Use WHOIS tools to verify the age of the sender’s infrastructure. If the company claims to be established but the domain is 3 months old, it is a fraud.
• Do Not Engage: Do not reply to “Application Status” emails for roles you did not apply for. This confirms your email is active and moves you into a higher-tier “target” list.