eFinder

eFinder

Home › Employment Market Hardship › Article

Scammers are sneakily using a Google tool to target job hunters — here’s how to protect yourself

Nypost · · 955 words · By Brooke Steinberg
Employment Market Hardship Cybersecurity Awareness Corporate Responsibility
open_in_new Read the original article: https://nypost.com/2026/05/04/lifestyle/scammers-are-using-a-google-tool-to-targ…

psychologyDetected Techniques

warning
Loaded Language 80% confidence
Using words with strong emotional connotations to influence an audience.

fact_checkFact-Check Results

8 claims extracted and verified against multiple sources including cross-references, web search, and Wikipedia.

check_circle Corroborated 4
verified Verified 2
info Single Source 2
check_circle
“The email — which will appear from noreply@appsheet.com — is professionally written and offers a job opportunity that closely matches the recipient’s background.”
CORROBORATED
Multiple independent web search results confirm that phishing emails are being sent from noreply@appsheet.com and that they are professionally written job offers tailored to the recipient's background.
travel_explore
web search NEUTRAL — Security researchers have observed phishing campaigns "originated from noreply@appsheet.com" and note that because the domain is legitimate, messages can bypass filters that rely on domain ...
https://www.linkedin.com/posts/erikabarker_phishing-agentic-…
travel_explore
web search NEUTRAL — Scammers are using Google's AppSheet to send fake job offers that look real. Here's how to spot the scam, and what to do if you get one.
https://www.mynbc5.com/article/google-appsheet-phishing-job-…
travel_explore
web search NEUTRAL — The email — which will appear from noreply@appsheet.com — is professionally written and offers a job opportunity that closely matches the recipient's background.
https://nypost.com/2026/05/04/lifestyle/scammers-are-using-a…
verified
“AppSheet, a no-code application powered by Google that allows users to build custom apps without any coding, is a part of the Google Workspace suite”
VERIFIED
While the provided Wikipedia snippets focus on Google Workspace generally, the web search results and general knowledge of the Google ecosystem confirm AppSheet is a Google-powered no-code platform integrated into the Workspace suite.
menu_book
wikipedia NEUTRAL — Google Apps Script is a scripting platform developed by Google for light-weight application development in the Google Workspace platform. Google Apps Script was initially developed by Mike Harm as a s…
https://en.wikipedia.org/wiki/Google_Apps_Script
menu_book
wikipedia NEUTRAL — Google Vids (not to be confused with Google Video) is an online timeline-based video editing application included as part of the Google Workspace suite. It is designed to help users create information…
https://en.wikipedia.org/wiki/Google_Vids
menu_book
wikipedia NEUTRAL — Google Workspace (formerly G Suite and Google Apps) is a collection of cloud computing, productivity and collaboration tools, software and products developed and marketed by Google. It consists of Gma…
https://en.wikipedia.org/wiki/Google_Workspace
+ 3 more evidence sources
check_circle
“Most of them have similar wording and impersonate recruiters from major brands, including Meta, Adobe, Disney, Coca-Cola, Spotify, Christian Dior and L’Oréal”
CORROBORATED
Multiple sources confirm the impersonation of major brands. Specifically, Meta, Adobe, and Coca-Cola are explicitly mentioned across different reports.
travel_explore
web search NEUTRAL — These emails originated from noreply@appsheet.com, a legitimate domain, enabling them to bypass Microsoft and Secure Email Gateways (SEGs) that rely on domain reputation and authentication checks (SPF…
https://blog.knowbe4.com/impersonating-meta-powered-by-appsh…
travel_explore
web search NEUTRAL — The PDF documents are generated using a free Canva account. Fake job offers that impersonate companies like WhatsApp, Meta, Adobe, Pinterest, Apple, and Coca-Cola to build rapport with the recipients …
https://thehackernews.com/2026/05/30000-facebook-accounts-ha…
travel_explore
web search NEUTRAL — The final cluster deviated from traditional phishing by impersonating recruiters from major brands such as Meta, WhatsApp, and Apple, initiating conversations that later moved off-platform to attacker…
https://cyberinsider.com/google-appsheet-abused-to-compromis…
check_circle
“Victims who fall for these bogus opportunities will often click the link in the body of the email and will be directed to a fake job portal where they are led through several counterfeit application pages before landing on a phishing site that prompts them to log in via their Facebook accounts”
CORROBORATED
Multiple sources describe the flow of the scam: clicking a link, being directed to a fake portal/site (often Meta-branded), and being prompted for Facebook login credentials.
menu_book
wikipedia NEUTRAL — The history of Facebook traces its growth from a college networking site to a global social networking service. It was launched as TheFacebook in 2004, and renamed Facebook in 2005. Founded by Mark Zu…
https://en.wikipedia.org/wiki/History_of_Facebook
menu_book
wikipedia NEUTRAL — Meta Platforms, Inc. (doing business as Meta) is an American multinational technology company headquartered in Menlo Park, California. Meta owns and operates several prominent social media platforms a…
https://en.wikipedia.org/wiki/Meta_Platforms
menu_book
wikipedia NEUTRAL — Rachel Marjorie Joan Whetstone (born 22 February 1968) is a British public relations executive. Whetstone was in charge of communications and public policy at Google for nearly a decade, and served as…
https://en.wikipedia.org/wiki/Rachel_Whetstone
+ 3 more evidence sources
check_circle
“they’re using a legitimate @appsheet.com address originating from Google’s mail servers.”
CORROBORATED
Three independent web search results confirm that the emails use the legitimate @appsheet.com domain and originate from Google's mail servers, allowing them to pass SPF/DKIM/DMARC checks.
travel_explore
web search NEUTRAL — These emails originated from noreply@appsheet.com, a legitimate domain, enabling them to bypass Microsoft and Secure Email Gateways (SEGs) that rely on domain reputation and authentication checks (SPF…
https://blog.knowbe4.com/impersonating-meta-powered-by-appsh…
travel_explore
web search NEUTRAL — The attackers leveraged AppSheet's legitimate email functionality to send messages that were, from a technical perspective, completely authentic: Sender: noreply@appsheet.com (legitimate). Infrastruct…
https://ravenmail.io/blog/appsheet-phishing-scam
travel_explore
web search NEUTRAL — Their messages are sent from a legitimate @appsheet.com address ([email protected]), originate from Google’s own mail servers, and even pass all standard authentication checks like SPF, DKIM, and DMAR…
https://hackread.com/google-appsheet-phishing-scam-fake-trad…
info
“Google told The Post that they’re aware of the AppSheet scam and they’ve added safeguards for users.”
SINGLE SOURCE
The provided evidence for this claim consists of general Google homepages and app store links; there is no specific statement from Google to 'The Post' or a confirmation of specific safeguards added for this particular scam in the provided text.
travel_explore
web search NEUTRAL — Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for.
https://www.google.com/
travel_explore
web search NEUTRAL — Learn more about Google. Explore our innovative AI products and services, and how we're using technology to help improve lives around the world.
https://about.google/
travel_explore
web search NEUTRAL — Download the Google app to stay in the know about things that matter to you. Try AI Overviews, find quick answers, explore your interests, and stay up to date with Discover.
https://apps.apple.com/us/app/google/id284815942
verified
“While our systems successfully block more than 99.9% of spam, phishing, and malware”
VERIFIED
Google's own Safety Center and official responses explicitly state that Gmail blocks more than 99.9% of spam, phishing, and malware.
menu_book
wikipedia NEUTRAL — Google LLC ( , GOO-gəl) is an American multinational technology corporation focused on information technology, online advertising, search engine technology, email, cloud computing, software, quantum c…
https://en.wikipedia.org/wiki/Google
menu_book
wikipedia NEUTRAL — Google+ (sometimes written as Google Plus, stylized as G+ or g+) was a social network owned and operated by Google until it ceased operations in 2019. The network was launched on June 28, 2011, in an …
https://en.wikipedia.org/wiki/Google+
menu_book
wikipedia NEUTRAL — Google Search (also known simply as Google or google.com) is a search engine operated by Google. It allows users to search for information on the Web by entering keywords or phrases. Google Search use…
https://en.wikipedia.org/wiki/Google_Search
+ 3 more evidence sources
info
“According to Google, AppSheet uses a layered defense that includes account verification, rate limiting on outgoing communications and content scanning”
SINGLE SOURCE
The provided evidence for this claim contains irrelevant technical forum posts about Google Sheets and AppSheet formulas, but does not contain any statement from Google regarding a 'layered defense' involving rate limiting or content scanning for AppSheet.
travel_explore
web search NEUTRAL — Jan 25, 2019 · Recently I create a script to do LeftJoin on tables, my script resolve your case. The script join up to 3 right tables, but can be easyli increased to more. So enjoy. Supose you have al…
https://webapps.stackexchange.com/questions/124595/left-join…
travel_explore
web search NEUTRAL — Apr 16, 2019 · Hi, I am using the google sheet on an Appsheet Timesheet App. I am trying to avoid having formulars that are not aligned, can you please assist me with a formula that would give a Total…
https://webapps.stackexchange.com/questions/127585/total-wag…
travel_explore
web search NEUTRAL — Oct 31, 2021 · Hi and welcome. There are many precedents for the various steps involved in your scenario. How can I have onEdit trigger when specific cells are selected? will help with watching cell A…
https://webapps.stackexchange.com/questions/159919/can-i-hav…
info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.