Monday, March 3, 2025
HomePhishingNew Fake Email Phishing Scam Attack LinkedIn Users - Beware

New Fake Email Phishing Scam Attack LinkedIn Users – Beware

Published on

SIEM as a Service

Follow Us on Google News

[jpshare]Fake Email phishing attack hitting LinkedIn users via Mail and LinkedIn inbox’s  and ask them to attach the CV. Since its looks like an original link which come from official LinkedIn, its leads to  many users to be victimized by this Email  phishing Attack .

It is decent to believe that beneficiaries of the false message would detect various cautioning signals when they open the correspondence in their email inbox.

Attackers have spammed out email messages posing as communications from LinkedIn, claiming that a company is “urgently seeking” workers matching your qualifications in “your region”.

Be that as it may, there’s dependably a possibility that somebody Eager to discover new employment may not see that the messages whether it is original Link or not.

The site (at https://linkedinjobs.jimdo.com) to which the underlying messages indicated has as of now been brought down, yet you can make certain that the scammers have already set up new ones, and changed the connection in hence sent messages .

Accoring to  Total Defence “Phone numbers can be sold for companies doing promotional cold calling. Or, the cyber criminal might call you himself in a vishing attack.

In other cases, he might use the information for identity theft, using the companies you worked at or attached references as a cover for fraudulent activities.”

By having Victims personal information link , your full name, date of birth, work and home email addresses, work and home telephone numbers, and all manner of other personal information that could be abused by scammers.

According to HELPNETSECURITY The scammers  are attempting to impersonate the well known  employment-oriented social networking service, however cautious clients will instantly spot numerous things that indicate the email being fake:

  • The email sender address that has nothing to do with LinkedIn
  • The lack of certain design elements and the “unsubscribe” footer usually contained in LinkedIn emails
  • The email not addressing the recipient by name
  • A sense of urgency that the email is designed to create
  • Typos, and so on.

Total Defense warns about Phishing scams ,

  • Non-existing organizations reaching users straightforwardly with employment offers for which they haven’t connected (as in this last LinkedIn trick),
  • Insecure sites (no HTTPS to protect the information imputed into job application forms)
  • Follow-up messages requesting more delicate data (e.g. financial balance number to set up direct store)

Also Read:

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Threat Actors Exploiting AES Encryption for Stealthy Payload Protection

Cybersecurity researchers have uncovered a surge in the use of Advanced Encryption Standard (AES)...

33.3 Million Cyber Attacks Targeted Mobile Devices in 2024 as Threats Surge

Kaspersky's latest report on mobile malware evolution in 2024 reveals a significant increase in...

Routers Under Attack as Scanning Attacks on IoT and Networks Surge to Record Highs

In a concerning trend, the frequency of scanning attacks targeting Internet of Things (IoT)...

Google Launches Shielded Email to Keep Your Address Hidden from Apps

Google is rolling out a new privacy-focused feature called Shielded Email, designed to prevent apps...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

JavaGhost: Exploiting Amazon IAM Permissions for Phishing Attacks

Unit 42 researchers have observed a threat actor group known as JavaGhost exploiting misconfigurations...

New Poco RAT Via Weaponized PDF Attacking Users to Capture Sensitive Data

A new variant of malware, dubbed "Poco RAT," has emerged as a potent espionage...

LARVA-208 Hackers Compromise 618 Organizations Stealing Logins and Deploying Ransomware

A newly identified cybercriminal group, LARVA-208, also known as EncryptHub, has successfully infiltrated 618...