Promising Jobs At the US Postal Service, 'US Job Services' Leaks Customer Data (krebsonsecurity.com) 12
An anonymous reader quotes a report from KrebsOnSecurity: A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers. The leaked records indicate the network's chief technology officer in Pakistan has been hacked for the past year, and that the entire operation was created by the principals of a Tennessee-based telemarketing firm that has promoted USPS employment websites since 2016. KrebsOnSecurity was recently contacted by a security researcher who said he found a huge tranche of full credit card records exposed online, and that at first glance the domain names involved appeared to be affiliated with the USPS. Further investigation revealed a long-running international operation that has been emailing and text messaging people for years to sign up at a slew of websites that all promise they can help visitors secure employment at the USPS.
Sites like FederalJobsCenter[.]com also show up prominently in Google search results for USPS employment, and steer applicants toward making credit card "registration deposits" to ensure that one's application for employment is reviewed. These sites also sell training, supposedly to help ace an interview with USPS human resources. FederalJobsCenter's website is full of content that makes it appear the site is affiliated with the USPS, although its "terms and conditions" state that it is not. Rather, the terms state that FederalJobsCenter is affiliated with an entity called US Job Services, which says it is based in Lawrenceville, Ga. The site says applicants need to make a credit card deposit to register, and that this amount is refundable if the applicant is not offered a USPS job within 30 days after the interview process. But a review of the public feedback on US Job Services and dozens of similar names connected to this entity over the years shows a pattern of activity: Applicants pay between $39.99 and $100 for USPS job coaching services, and receive little if anything in return. Some reported being charged the same amount monthly. Michael Martel, spokesperson for the United States Postal Inspection Service, said in a written statement that the USPS has no affiliation with the websites or companies named in this story.
"To learn more about employment with USPS, visit USPS.com/careers," Martel wrote. "If you are the victim of a crime online report it to the FBI's Internet Crime Complaint Center (IC3) at www.ic3.gov. To report fraud committed through or toward the USPS, its employees, or customers, report it to the United States Postal Inspection Service (USPIS) at www.uspis.gov/report."
A list of all the current sites selling this product can be found in Krebs' report.
Sites like FederalJobsCenter[.]com also show up prominently in Google search results for USPS employment, and steer applicants toward making credit card "registration deposits" to ensure that one's application for employment is reviewed. These sites also sell training, supposedly to help ace an interview with USPS human resources. FederalJobsCenter's website is full of content that makes it appear the site is affiliated with the USPS, although its "terms and conditions" state that it is not. Rather, the terms state that FederalJobsCenter is affiliated with an entity called US Job Services, which says it is based in Lawrenceville, Ga. The site says applicants need to make a credit card deposit to register, and that this amount is refundable if the applicant is not offered a USPS job within 30 days after the interview process. But a review of the public feedback on US Job Services and dozens of similar names connected to this entity over the years shows a pattern of activity: Applicants pay between $39.99 and $100 for USPS job coaching services, and receive little if anything in return. Some reported being charged the same amount monthly. Michael Martel, spokesperson for the United States Postal Inspection Service, said in a written statement that the USPS has no affiliation with the websites or companies named in this story.
"To learn more about employment with USPS, visit USPS.com/careers," Martel wrote. "If you are the victim of a crime online report it to the FBI's Internet Crime Complaint Center (IC3) at www.ic3.gov. To report fraud committed through or toward the USPS, its employees, or customers, report it to the United States Postal Inspection Service (USPIS) at www.uspis.gov/report."
A list of all the current sites selling this product can be found in Krebs' report.
Re: This is espionage, not a leak... (Score:1)
Dumb at many levels (Score:4, Insightful)
Anyone who's picked up a newspaper (or read one online) knows that the USPS is begging people to join them right now... they've got more empty positions than bodies willing to fill them.
Re: (Score:1)
really need to stop testing for pot even more so in places where it legal.
Re: (Score:2, Troll)
really need to stop testing for pot even more so in places where it legal.
That's one problem, and it is a big one. But another big problem is that their hiring process is months long. By the time they can hire anyone, the best candidates have found another position elsewhere. They have zero respect for the fact that people have lives and need income, and can't afford to wait around for them forever. They need to step up their HR game.
Re: (Score:2)
USPS doesn’t pay for shit. There’s literally a new person every week who delivers my mail. In the fall before the time changed it was showing up after 6pm. It’s improved slightly as now it’s usually there before 5pm.
Re: (Score:2)
It doesn't help that mail carriers are at far greater risk now than they were pre-2020: https://www.govexec.com/workfo... [govexec.com]
Formerly nobody dared fuck with the mail carrier due to severe federal penalties. But due to a heads-up-the-ass policy change in 2020 the postal police no longer have enforcement authority. They are basically just post office security guards anymore. And robberies/attacks on mail carriers have never been higher.
https://federalnewsnetwork.com... [federalnewsnetwork.com]
It's especially bad in pro-crime cities like
Scams like this one are old (Score:2)
They used to just sell you testing material. Nothing they do actually improves your chances of landing a job with the USPS.
Re: (Score:2)
They're just targeting dumb people and trying to separate them from their money per usual.
Re: (Score:1)
Dear Fed, I just read on /. some bad news (Score:1)