Alert Summary
Incident ID: IA-001
Vector: Unsolicited Email / Fraudulent “Technical Assessment”
Risk Level: HIGH (Financial Fraud & Credit Card Harvesting)
Status: ARCHIVED
This alert identifies a sophisticated predatory network (operating under names like Skivyy and Baishi) that targets job seekers with unsolicited “Application Status Updates.” The operation leverages professional terminology to pressure candidates into paying a non-refundable $35 fee for a mandatory technical assessment—a clear violation of ethical hiring standards.
Target / Method / Ultimate Goal
- Target: Active job seekers with resumes visible on public boards (IT Support, Analysts, Admin).
- Method: Pressure-Induced Monetization. Sending an invitation for a role never applied for (e.g., “Remote IT Support Associate”) and demanding an immediate “Assessment Fee” to proceed.
- Ultimate Goal: Direct financial theft of $35+ and the harvesting of active credit card data for secondary fraudulent use.
VETTICA Analysis: 3 Critical Policy & Technical Failures
1. Infrastructure Failure: The WHOIS Discrepancy
A professional platform’s digital footprint should match its claimed legitimacy.
- Forensic Finding: WHOIS data for the Skivyy domain showed a registration date of August 2025—just 90 days prior to the “global” recruitment push.
- VETTICA Verdict: CRITICAL FAILURE. A “vetted” professional platform operating on a “burner” domain launched less than three months prior is a primary indicator of a temporary fraud operation.
2. Financial Policy Failure: The “Pay-to-Play” Violation
This is the non-negotiable compliance failure that validates the scam.
- Hiring Ethics Violation: Legitimate employers—especially in the IT and ServiceNow ecosystem—do not charge candidates for background checks, training, or assessments during the screening phase.
- VETTICA Verdict: IMMEDIATE FAILURE. Demanding a fee violates standard GRC (Governance, Risk, and Compliance) hiring frameworks and signals a financial trap.
3. Community Intelligence Failure
Cross-referencing intent via external threat intelligence.
- Forensic Finding: Multiple external data points confirmed the “Technical Assessment Fee” as a consistent, repeatable fraudulent scheme used to extract money from job seekers.
- VETTICA Verdict: SYSTEMIC FAILURE. The operation is a known predatory network designed to exploit the current job market’s high-pressure environment.
VETTICA Action Plan: Protect Your Professional Perimeter
- Enforce a “Zero-Fee” Policy: If a recruitment process requires a credit card before a live human interview, terminate the session immediately.
- Audit the Domain: Use WHOIS tools to verify the age of the sender’s infrastructure. If the company claims to be established but the domain is 3 months old, it is a fraud.
- Do Not Engage: Do not reply to “Application Status” emails for roles you did not apply for. This confirms your email is active and moves you into a higher-tier “target” list.
