Why should I never install a job app sent to me in a chat message?

New Zealand's National Cyber Security Centre warned on Nov 4 about a fake job-seeking app for Android that hands scammers full control of the phone. Only install apps from the official Google Play or Apple App Store, never from a chat link, and never grant an app Accessibility access unless it is a trusted tool you chose yourself.

You are job hunting, a friendly recruiter messages you, and step one is ‘just install our hiring app from this link’ — it feels like progress, but that link is the trap.Short answer: New Zealand’s National Cyber Security Centre warned on Nov 4 about a fake job-seeking app for Android that hands scammers full control of the phone. The rule that keeps you safe anywhere: only install apps from the official Google Play or Apple App Store, never from a chat link, and never grant an app Accessibility access unless it is a trusted tool you chose yourself, like a screen reader.Why it matters: The attack works in three steps. You are persuaded to sideload the app — installing it from a file or link instead of the store.

A fake Google Play update screen then makes it look official. Finally it asks for Accessibility permission, a powerful feature built to help people with disabilities by reading the screen and tapping on your behalf. Hand that to malware and, in the NCSC’s words, it can change permissions and settings until the scammer has full access.

The same malware can also pose as a banking app, not just a jobs app.Do it step by step:1. Treat any unexpected job offer that rushes you onto another chat app, then asks you to download an app before a real conversation, as a red flag — stop and verify the employer independently.2. Leave ‘install from unknown sources’ off.

The NCSC recommends never enabling it.3. Audit Accessibility now: Settings > Accessibility > Installed apps — remove anything you do not recognize or no longer use.4. Keep the phone and apps updated, use strong unique passwords, and turn on multi-factor authentication for email and banking.5.

Already installed one and the phone freezes or shows odd update screens? Stop using it, call your bank, change passwords starting with email and banking from a clean device, and know that deleting the app may not be enough — a factory reset is the surer clean, reinstalling only apps you recognize.Pro tip / common mistake: A real employer’s app lives in the Play Store under the company’s name. If the ‘recruiter’ cannot point you to that store listing, there is no job — there is only the app.Ad’s take: Job hunting is stressful enough without somebody weaponizing it.

Slow is safe here: a real opportunity survives you taking ten minutes to check it.