The broad adoption of HR recruitment and management software has caught the attention of cybercriminals, triggering new scams and attacks.