Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Group-IB reported in February 2024 that a previously unknown criminal group, dubbed “ResumeLooters,” compromised 65 employment and retail websites, mainly in the Asia-Pacific region (APAC). Its analysis counted 2,188,444 rows in stolen files and 510,259 user records attributed to job-search websites. Those figures describe rows and reported data records—not confirmed counts of unique people—and the public report cannot tell an individual whether their résumé was included.
What is ResumeLooters?
ResumeLooters is the name Group-IB’s Threat Intelligence unit gave to a cybercrime campaign focused on recruitment and job-search platforms. Group-IB said it detected the activity in November 2023, identified 65 compromised websites between November and December 2023, and traced the earliest observed attacks to the beginning of 2023 using file-creation dates on attacker infrastructure. The campaign also targeted some retail companies. Group-IB’s report does not establish the operators’ identity, nationality, location, or sponsorship.
How many resumes did ResumeLooters steal?
These are Group-IB’s 2024 incident-analysis figures:
| Measure | Reported figure | What it means |
|---|---|---|
| Compromised websites | 65 | Sites Group-IB identified as compromised between November and December 2023. |
| Rows in stolen files | 2,188,444 | A row count across files recovered or observed by researchers; Group-IB did not establish that each row was a different person. |
| User data from job-search websites | 510,259 | The report’s job-search-site user-data subset, not a verified unique-person total. |
| Known victims in APAC | Over 70% | The share of victims located in APAC among the victims Group-IB identified, not a complete census of all affected organizations. |
Rows can include duplicate people, multiple entries for one account, or other repeated data. The report also does not say that every affected site lost its entire database or that every advertised record was sold. “Millions” in the headline therefore refers to the scale of rows in stolen files, not millions of confirmed individuals.
#1 Best Overall
- ✅ STYLE MEETS FUNCTION – Elegant design featuring convenient, safe pockets ideal for documents, business cards, travel tickets, pitch proposals & resumes. Includes a pen holder & refillable writing pad
- ✅ SLEEK & PROFESSIONAL – Make a strong first impression with this modern portfolio with a classy piano black matte finishing. Fits most briefcases & bags
- ✅ PREMIUM DURABILITY – Ideal for today’s hectic business travel schedules, this document holder is water resistant and reinforced with accent stitching
- ✅ IDEAL GIFT – College graduation seeking out their first job? Looking to up your Wall Street game? This is the best gift for men & women!
- ++ ONE YEAR GUARANTEE ++ We stand fully behind the quality of our product & offer a full 1 YR WARRANTY
What information did ResumeLooters steal?
Group-IB said databases taken from targeted sites could contain:
- Names
- Phone numbers
- Email addresses
- Dates of birth
- Employment experience and history
- Other sensitive personal information stored by the site
The exact fields and volume varied by website. Group-IB reported that stolen data was advertised in Telegram channels, but did not establish that every record was sold.
Rank #2
- Note: Notepad, paper, and pen are not included
- Padfolio Dimensions: 12.6" x 9.8" (32 x 25 cm). The ideal size to securely hold and organize Letter/A4 documents & legal notepads
- Impeccable Organization: Everything has its place. Portfolio folder Keep your resume, notes, papers, business cards, and writing instruments neatly arranged and instantly accessible for any meeting or interview
- Universal & Professional: folio is sophisticated, gender-neutral design is perfect for students, interns, and professionals across all fields, making a polished statement in classrooms, offices, and corporate events
- Smart Functionality: The 360° flip-and-lay-flat design portfolio binder ensures effortless writing anywhere—from the conference room to on-the-go
How did SQL injection and XSS affect job sites?
The campaign used two related but distinct techniques. SQL injection targeted data stored behind a website; cross-site scripting (XSS) altered what a legitimate site served to visitors.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Technique | Role in the campaign | Potential result |
|---|---|---|
| SQL injection | Attackers sent crafted input to the site’s database layer to retrieve data. | Database contents such as résumé and contact fields could be copied into stolen files. |
| XSS | Researchers found scripts injected into legitimate job-search pages. | The scripts were intended to load more malicious code and display phishing forms. |
Group-IB found evidence that some visitors’ devices executed the injected code. It explicitly cautioned that seeing a script on a site does not prove that it ran on every visitor’s device. SQL injection concerns the theft of stored records; XSS concerns the behavior presented to people browsing the compromised site.
Rank #3
- Perfect Pad Holder: Measuring 12.9" x 9.8", this portfolio binder fits letter-size/A4 paper and legal pads, lightweight and portable (pad, paper, and pen not included)
- Premium PU Leather: Crafted from premium PU leather with fine stitching, this portfolio offers a comfortable feel and reliable protection, making it perfect for daily use
- Efficient Organization: This padfolio features a pen loop, multiple slots and holders for files, receipts, cards, notepad, keeping your essentials neatly organized and secure
- Wide Use: This portfolio offers a sleek, professional look, perfect for school, office, business meetings, interviews, and corporate events
- Perfect Gift: This padfolio makes a practical and thoughtful gift for college graduates, interns, or anyone starting their career, leaving a great first impression in interviews and at work
Where were the known victims?
Group-IB said over 70% of the known victims were in APAC. Its largest identified country counts were:
- India: 12 victims
- Taiwan: 10 victims
- Thailand: 9 victims
- Vietnam: 7 victims
The researchers also identified compromised companies in Brazil, the United States, Turkey, Russia, Mexico, Italy and elsewhere. These locations describe organizations Group-IB found during its investigation, not every affected company worldwide.
Rank #4
- A Must-Have Career Essential: Woweasi portfolio binder is crafted with premium durable faux leather to ensure long-lasting use. It makes a polished impression in interviews, conferences, and business meetings.
- Universal Fit for All Careers: This padfolio measures 9.6" x 12.6" to hold letter/A4-sized papers—spacious yet lightweight. Strong metal clips and a magnetic closure keep documents securely in place.
- Multi-Functional Organizer: Featuring an all-in-one design, this portfolio organizer includes a letter/A4 writing clipboard, pen holder, and multiple pockets for business cards, resumes, and contracts. (Pen and paper not included.)
- Easy to Use: The portfolio with 360° flip design for flat writing, Perfect for writing in outside,easy to use and stylish design elevates professionalism while keeping documents organized and accessible.
- Perfect Career Gift:The Woweasi portfolio folder, with its sophisticated design, makes a perfect gift for graduates, colleagues, or career-driven individuals.
Was my resume stolen in the ResumeLooters attack?
The public Group-IB report does not provide an individual exposure checker, a complete public list of victim sites, or enough information to determine whether a particular résumé was among the stolen data. Being a user of a job site does not by itself prove exposure, and not seeing a public notice does not prove safety.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match- Look for a breach or security notice from the specific recruitment platform, employer or agency where you submitted your résumé.
- Verify notices through the organization’s known official website or support channel rather than links in an unexpected email or text.
- Ask the platform what data and date range were affected, whether your account was involved, and what protective steps it recommends.
Do not infer personal exposure solely from the 2,188,444-row or 510,259-record figures; neither is a unique-person list.
Best Value
![Pacific Mailer Padfolio Portfolio Leather Binder, Interview Legal Document Organizer, Business Card Holder Included Letter Sized Writing Pad [Piano Noir Faux Leather Matte Finish]](https://m.media-amazon.com/images/I/41CSIOr0ZoL._SL160_.jpg)
- Professional design: Slim and sleek, luxurious looking portfolio provides more confidence and will lead to more success in the meeting, proposal, presentation, interview, or making a sales. A handy memo pad is included in the portfolio so you will have access to write any notes anywhere as you go.
- High quality material: Made by superior quality of PU leather in a matte finish provides a more professionalism looking.
- Graduation gift: A great gift to the newly graduate students looking for their first job, with this portfolio it will lead them to a more successfully career during their interviews.
- Versatile organize: Looking for a portfolio that would fit everything on the go? A business card, a flyers, a pen / pencil, an employee ID card, a passport, or a document pocket. Our portfolio has all the pockets you need no matter if you running errands, meetings.
- Travel friendly: This padfolio binder is lightweight and compact and it is easily fits into briefcares and bags. Making it the perfect accesorry for on the go professionals.
How to handle messages after a recruitment-site breach
A breach-related message can itself be a phishing lure. CNIL’s March 13, 2024 guidance for a separate France Travail breach recommends the following general precautions; it was not issued specifically for ResumeLooters:
- Treat urgent SMS messages and emails with suspicion.
- Never send passwords or banking details through messaging.
- Avoid suspicious attachments and login links.
- Open the official service by typing its address or using a trusted bookmark.
- Monitor account activity and use robust, unique passwords.
Read the CNIL guidance for that case’s full context. These steps reduce the chance of follow-on phishing; they cannot retrieve data that an attacker already copied.
What is established—and what is not?
- Established by Group-IB: a campaign against recruitment and other sites, 65 identified compromised websites, SQL-injection database theft, XSS-based phishing behavior, the reported row and user-data counts, and an APAC-heavy victim distribution.
- Not established in the public report: a count of unique people, exposure of every site user, theft of every site’s full database, sale of every record, a complete victim list, or the operators’ nationality and sponsorship.
Chinese-language Telegram accounts and tools were among the clues Group-IB observed, but those clues do not prove who operated the campaign.
What recruitment-platform operators should learn
The incident illustrates why recruitment services need testing of both database-facing inputs and user-facing content. SQL-injection defenses should include parameterized queries, strict input handling and least-privilege database accounts. XSS defenses should include output encoding, content-security controls and monitoring for unauthorized script changes. Organizations can consider independent vulnerability assessment or penetration testing; Group-IB describes such services on its service and incident-report pages. The public report does not document a campaign-wide remediation status.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
