LinkedIn Users Hit by Phishing Scam Offering Fake Executive Roles
Cybercriminals are now using LinkedIn to trick finance leaders and high-net-worth individuals into handing over their Microsoft login credentials. Instead of usual phishing emails, attackers are sending direct messages that appear professional and genuine at first glance. The new phishing scam on LinkedIn is being carried out by a new fund called “Common Wealth,” inviting targets to join fake executive positions.
LinkedIn phishing scam tricks professionals with fake executive positions
The phishing campaign begins with a friendly LinkedIn message, claiming to offer a leadership opportunity with a South America-focused investment fund connected to a supposed asset management company. The message is framed as a personal invitation and uses a professional tone, tapping into trust and curiosity.
When users click the link, they are taken through several redirects and verification screens, including CAPTCHA, to avoid detection by automated security tools. Finally, they end up landing on a login page that looks like a 1-1 copy of Microsoft’s login screen. Now, if the victim enters their login details, those credentials are shared directly with the hackers. The attackers can also capture session cookies, meaning they can stay logged in even if the victim changes their password later.
LinkedIn now seems to be a new hub for attackers
Attackers are using new methods to target individuals. They have moved on from the typical email-based scams. Researchers note that a growing number of attacks now happen on platforms like LinkedIn, not email. Experts have also pointed out that many email filters have become strong enough to block traditional phishing attempts. And so, attackers are shifting to social platforms where trust is easier to exploit.
As of right now, there’s no way to stop or ban accounts carrying out phishing attacks. The only thing you can do to be safe is: be aware. Do not click on any random links and always cross-verify the account before reacting to their DMs.
The post LinkedIn Users Hit by Phishing Scam Offering Fake Executive Roles appeared first on Android Headlines.