Phishing scammers are posting fake “account restricted” comments on LinkedIn

Phishing scammers are posting fake “account restricted” comments on LinkedIn, claiming that a user has engaged in activities that are not in compliance and that their account is temporarily restricted until an appeal is submitted through a link in the comment. The scammers’ posts mimic official LinkedIn bot accounts and use various names, with several similar accounts reported in a short period, suggesting automated creation and posting at scale.

The links themselves use shortened URLs, some of which have been disabled, while others direct users to phishing sites; attackers are believed to test different approaches to see which ones last the longest. Malwarebytes notes that if users follow these links they land on a phishing page designed to steal LinkedIn login details, and Malwarebytes’ own blocks have targeted the associated IP addresses. A LinkedIn spokesperson confirmed to BleepingComputer that the company is aware of the activity and is taking action.

Stay safe by avoiding unsolicited links, logging in directly on the platform, and using protective tools such as an updated anti-malware solution. According to BleepingComputer.