Leucrota: The Beast That Mimics
The Leucrota imitates a human voice to lure its prey. Fake job applicants do the same: flawless, human-sounding candidates that flood your careers page and never existed.
You've captured the Leucrota. Your next trail clue is unlocked at the bottom of this page.
The Leucrota mimics the human voice to draw its prey close. Fraudulent applicants mimic the perfect candidate (polished résumés, fluent answers, fabricated identities) to get through your hiring funnel and reach code, credentials, or payroll.
How to prevent the Leucrota's attack
Remote hiring turned the careers page into an attack surface. Fraudulent applicants use fabricated identities, AI-generated résumés, and evasion tools (VMs, VPNs, residential proxies) to pass screening and reach interviews. The goal might be a paycheck, or a way inside your systems.
Résumé keywords and interview polish can't tell a real candidate from a manufactured one. Effective screening fingerprints the applicant's browser session for the automation and infrastructure signals a genuine job-seeker never shows, before they reach your ATS or a recruiter's calendar.
Prevention checklist
- Fingerprint applicant sessions for VM, VPN, and datacenter-proxy signals a normal candidate doesn't use.
- Detect automation and headless browsers submitting applications at machine speed.
- Flag many applications sharing one device or network behind different identities.
- Screen suspicious sessions before they reach your ATS or a recruiter, not after interviews start.
- Correlate signals across the funnel so one flagged applicant exposes the wider campaign.
Risk signals and how to respond
Applications from VMs or datacenter IPs
Many candidates, one device or network
Applications submitted at machine speed
Flawless résumé, evasive infrastructure
| Risk signal | What it may indicate | Response |
|---|---|---|
| Applications from VMs or datacenter IPs | Concealed or fabricated identity | Fingerprint the session and challenge before the ATS |
| Many candidates, one device or network | Coordinated fake-application campaign | Cluster by device and review together |
| Applications submitted at machine speed | Automated form filling | Detect headless browsers and automation |
| Flawless résumé, evasive infrastructure | AI-generated or impostor applicant | Weight behavioral and infrastructure signals over content |
What it looks like in cside
Detection list and session flags
cside surfaces suspicious sessions and the signals behind each flag, so recruiters see risk before scheduling.
Fake-account and bot signals
The same automated traffic behind fake accounts drives fake applications. cside identifies both.
Next Trail Clue
The next creature is waiting nearby. Use the clue below to find it, then scan its card to keep going.
When the trail calls for a rest, follow the promise of a softer seat. Beside an area of rest, your final creature is waiting.
Please leave the box exactly where you found it so the next player can find it too. Take one card and put the rest back.