Phishing, Identity

Fake job offers leveraged in Facebook credential phishing campaign

the logo of US online social media and social networking service Facebook on a smartphone screen

HackRead reports that widely known brands, including KFC, Red Bull, and Ferrari, have been impersonated in fraudulent job postings aimed at compromising Facebook login details as part of a sweeping credential phishing campaign.

Threat actors have delivered malicious emails with a suspected templated or large language model-generated text that includes a link redirecting to a phony image challenge security check, which then takes targets to a bogus job ad on a Glassdoor-looking website, according to a Sublime Security report.

Targets are then lured to use either their email or Facebook account to login, with the latter prompting the appearance of a progress indicator that never finishes loading, said researchers, who noted that such a scam is indicated by the use of suspicious URLs and email addresses that are not aligned with the spoofed brand's actual website.

Such a development comes after Microsoft 365 and Google Workspace users were reported by Sublime Security researchers to have their login details targeted through fake Google job offers.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds