LinkedIn Confidential — Pt. 4

“Georgia Emmanuel” presents as a recruiter based in Hannover, Germany, but is listed on 204 job postings at time of capture, with only 1 connection. A genuine recruiter with one connection is not placing candidates at scale across 204 roles. The volume-to-connection ratio is the tell.

A single job listing’s “Meet the Hiring Team” modal surfaces 10 members — all listing their employer as Confidential, all fabricated. The original job poster does not control who appears in this panel. Any LinkedIn account can attach itself to any listing. This panel exists solely to manufacture the appearance of a real, staffed hiring process.

Beyond the core 10-member panel, three additional profiles are documented: Georgia Elizabeth (a variant of the Georgia Emmanuel identity), Wesley Raupp, and Victoria Anderson. Each operates independently as an attack surface while appearing to be part of the same legitimate hiring operation.

“Darcy Ryan” is listed as Director of Operations in Los Angeles with a CIPM (Certified International Project Manager) affiliation — a credential that sounds substantial but is attached to an account with no verifiable history. The listing was 18 hours old at time of capture.

“Gray Beebah” presents as a recruiter in Indianapolis with 15 connections and 10 active job listings placing candidates in Mexico. The profile photo was traced to a Facebook post from SALON CHIC in Côte d’Ivoire, dated November 17, 2022, with a WhatsApp contact number: +225 07 888 222 23. The origin of the photo is West Africa. The listed location is Indiana. The jobs are in Mexico.

“Ruth Faasema Ph.D” has over 500 connections, 100 active job listings at time of capture, and locations listed as both Naperville, IL and Abuja, Nigeria. The profile includes a phone number (+234 703 052 5895, a Nigerian number) and an email (rfaasema@gmail.com). The volume of connections and jobs gives the profile a veneer of legitimacy that makes it one of the most dangerous in this network.

Ruth Faasema’s scripted comment — “Kindly send me a connection request to discuss further about your job search” — was documented being sent to real job seekers including Andrea M. Lara Noble and Amy K D’Amico. The script is designed to move the target off LinkedIn and into a direct communication channel controlled by the threat actor.

“Wesley Raupp” is listed in Surrey, BC with 2 followers and 29 active job listings. The account joined LinkedIn in January 2026, with the profile photo updated less than one week before capture. No verifications. No endorsements.

The same face appearing as “Wesley Raupp” on LinkedIn was found on Fiverr as “Gregory” (fiverr.com/gregory_hopkins), selling resume writing services. One face. Two platforms. Two separate fraud vectors.

“Victoria Anderson” presents as a recruiter in Sevierville, TN, with affiliations to Kelly Services and Florida State University, and 19 connections. Her New Year 2026 post specifically targeted active job seekers.

The profile photo was traced to a Pexels stock image by photographer Polina Zimmerman (pexels.com/photo/3747457) — a photo that has received 324 likes on the platform and is freely available to anyone.

“Maggie Murdock” joined LinkedIn in October 2021, has 471 connections, is listed in Burlingame, CA — and has never posted. A profile with nearly 500 connections and zero posts over multiple years is a dormant asset: built, aged, and held in reserve until it is needed. 471 connections that cannot be traced to any activity is a deliberate construction, not a passive one.

“Tony Russell” presents as a Strategy Director based in Singapore with 17 connections and 54 active job listings.

“Thomas Partey” shares a name with Arsenal F.C. midfielder Thomas Partey — 5 connections, Chicago-based, with the listing captured 7 hours after posting. The name is borrowed from a public figure for recognition.