Indeed Job Applicant Files Police Report After Unauthorized Access to Password Manager
On July 13, 2026, I applied for a position titled "Call Center – Pollster / Optimar Research / Ankara" listed on the Indeed platform. Believing the listing was legitimate because it used the "Optimar" brand, I submitted my application. Even though I explicitly stated that I was a student, the recruiters used convincing language to enroll me into their onboarding process.
During the interview, I noticed amateur background noises and an unprofessional environment. At first, I tried to brush it off as typical for a polling call center; however, as the process progressed, my suspicions were confirmed. Under the guise of initiating the onboarding process and gaining my trust, they instructed me to install the AnyDesk remote desktop application on my computer.
Via AnyDesk, they accessed my system without my explicit consent or full knowledge, installed an application named X-Lite, and made unauthorized attempts to compromise my browser data, specifically targeting my Password Manager. I confirmed that unauthorized access was established from IP address 212.68.41.222 and that malicious files, such as solveline.com.tr/lite.exe, were downloaded in the background. I clearly saw this IP connection and security alert flagged on my Google Password Manager interface. The phone number used for communication throughout this process was +90 ***********88.
The moment I recognized the breach, I disconnected my internet, updated all my online banking and digital account credentials, enabled two-factor authentication, and took all necessary steps to secure my device. I have filed an official criminal complaint with law enforcement using the evidence collected.
My objective is to prevent this fraudulent job listing—which uses the Optimar name and logo on Indeed—from victimizing more people, especially job-seeking students. I demand that Indeed urgently audit this listing and similar content, prevent the misuse of Optimar’s corporate brand, and issue clear warnings regarding scams conducted through remote access tools. Furthermore, I request the immediate removal of the listing, a formal investigation into the associated account, and the implementation of stricter verification mechanisms for job postings.