As Seen in The Wall Street Journal, Bloomberg, Fox News Media, Entrepreneur, NBCNews.com & YahooNews.com58,846 total fake jobs removed from LinkedIn150 fake jobs removed from Teal7,000+ fake profiles removed from LinkedIn1,000+ hijacked profiles removed and disrupted100s of fake companies destroyedOne Mission — Decimating Criminal EnterprisesAs Seen in The Wall Street Journal, Bloomberg, Fox News Media, Entrepreneur, NBCNews.com & YahooNews.com58,846 total fake jobs removed from LinkedIn150 fake jobs removed from Teal7,000+ fake profiles removed from LinkedIn1,000+ hijacked profiles removed and disrupted100s of fake companies destroyedOne Mission — Decimating Criminal Enterprises
LinkedIn Confidential Pt. 6 banner
Part 6 of 6

LinkedIn Confidential — Pt. 6

The Infiltration

The Opening

Part 6 documents the culmination of everything that came before it: a coordinated bot network that has not just created fake job listings — it has infiltrated real ones. Six fake profiles. 506 compromised job listings. Every listing they have touched is now a data-harvesting point embedded in what appears to be a real company’s real hiring process.

Beverly Parker is a real, legitimate recruiter. Her real job posting was one of 155 listings that “Paul Davis” attached himself to. She did not choose him. She did not authorize him. She does not know he is there.

“Beverly Parker didn’t choose them. They chose her.”

The Exhibits — 6 Bot Profiles, 506 Compromised Listings

Exhibit 1 Felicity Leopes — 14 Jobs, Stolen Photo of Shirley Shields Gordon

“Felicity Leopes” — note the misspelled surname (“Leopes” instead of “Lopes”) — uses a photo stolen from Shirley Shields Gordon and is attached to 14 active job listings at time of capture. The misspelling is a hasty construction tell. The stolen photo gives the profile a face that passes a quick visual scan.

Red Flags: Felicity Leopes

  • Photo stolen from Shirley Shields Gordon
  • Misspelled surname: 'Leopes' instead of 'Lopes'
  • 14 active job listings at time of capture
Exhibit 2 Paul Davis — 155 Jobs, Most Prolific Single Bot in This Network

“Paul Davis” is the most prolific single fake profile documented across all six parts of this series. 155 active job listings at time of capture. “Paul Davis” is attached to Beverly Parker’s real listing — and 154 others. The name “Paul Davis” is one of the most common names in the English-speaking world, chosen precisely because its commonness makes it harder to flag, harder to search, and harder to remember as suspicious.

“155 compromised listings. One name. The most common kind.”

Red Flags: Paul Davis

  • 155 active job listings — highest documented count in this series
  • Attached to Beverly Parker's real listing without her knowledge
  • Name chosen for its commonness to evade flagging
Exhibit 3 Benson Marl — 75 Jobs

“Benson Marl” is attached to 75 active job listings at time of capture. The profile operates as a coordinated network member — active alongside Paul Davis, Jackson Nike, Franklin Maureen, Annabelle James Linda, and Felicity Leopes as part of a synchronized bot operation.

Red Flags: Benson Marl

  • 75 active job listings at time of capture
  • Coordinated network member
  • Operating alongside 5 other documented bot profiles
Exhibit 4 Jackson Nike — 59 Jobs, Stolen Photo of Latvian Prime Minister Māris Kučinskis

“Jackson Nike” uses a photo stolen from Māris Kučinskis, the former Prime Minister of Latvia, and is attached to 59 active job listings. Stealing the face of a sitting head of government carries the same federal implications as “John Castle” in Part 2 — using a foreign official’s image for fraud implicates international identity theft law.

Red Flags: Jackson Nike

  • Photo stolen from Māris Kučinskis, former Prime Minister of Latvia
  • 59 active job listings at time of capture
  • International identity theft — stolen image of a head of government
Exhibit 5 Franklin Maureen — 104 Jobs, Same Kučinskis Photo

“Franklin Maureen” uses the same stolen photo as “Jackson Nike” — the image of former Latvian Prime Minister Māris Kučinskis — attached to 104 active job listings. Two different profiles. One stolen face. 163 combined job listings. This is not a coincidence — it is a coordination signal. When two fake profiles use the same stolen photograph, they are managed by the same operation.

“Same face. Two profiles. 163 combined listings. This is coordination, not coincidence.”

Red Flags: Franklin Maureen

  • Photo stolen from Māris Kučinskis — same photo as Jackson Nike
  • 104 active job listings
  • Shared stolen photo confirms coordinated operation with Jackson Nike
Exhibit 6 Annabelle James Linda — 99 Jobs, Widely Circulated Stolen Image

“Annabelle James Linda” uses a widely circulated stolen image and is attached to 99 active job listings. The three-given-name construction matches the patterns documented throughout this series. The widely circulated nature of the stolen photo — appearing across multiple platforms and profiles — confirms it was selected from a pool of images used by the network.

Red Flags: Annabelle James Linda

  • 99 active job listings at time of capture
  • Widely circulated stolen image
  • Three-given-name construction matches network-wide pattern

Evidence Summary — The Bot Network

The six profiles below operated simultaneously, collectively infiltrating 506 real job listings without the knowledge of the original job posters.

ProfileJobs InfiltratedStolen Photo SourceNotes
Felicity Leopes14Shirley Shields GordonMisspelled surname: 'Leopes'
Paul Davis155UndocumentedMost prolific single bot; Beverly Parker's listing compromised
Benson Marl75UndocumentedCoordinated network member
Jackson Nike59Māris Kučinskis (Latvian PM)Former head of government's image stolen
Franklin Maureen104Māris Kučinskis (Latvian PM)Same photo as Jackson Nike — coordination signal
Annabelle James Linda99Widely circulated stolen imageThree-given-name construction
TOTAL5066 profiles, 506 compromised listings

“506 listings. 6 profiles. Zero of the real job posters knew.”

Why This Matters

Part 6 closes the series with the most operationally significant finding: the threat is no longer only in fake job listings posted by fake recruiters. The threat is inside real job listings posted by real recruiters — embedded in Beverly Parker’s listing and 505 others without her knowledge, without her consent, and without any mechanism currently in place to alert her.

The Full Series

Across six parts and hundreds of documented profiles, LinkedIn Confidential is the definitive record of how the Confidential page exploit operates — from the first fake profile in Part 1 to the 506-listing bot network in Part 6. The operation is not isolated. It is coordinated, redundant, ongoing, and growing.

Every major company is targeted. All Confidential pages should be pulled until the accounts affiliated with fake profiles are gone. These are concerted, focused efforts to use real people in scams that rob job seekers of hope, money, time — and in some cases, their lives.

Visual Documentation

Every slide from the original case file. Click any image to expand full-screen.