A recent phishing campaign targets marketing professionals by impersonating major brands such as Coca-Cola, McKinsey, and Netflix, convincing victims to divulge their Google credentials. The campaign uses nested redirects to disguise phishing links, making them appear legitimate. Researchers note that such job scams exploit the competitive nature of job markets, especially in entry-level positions. Phishers utilize platforms like PeopleForce to distribute convincing emails that lead to fake job interviews.
Techniques like browser-in-the-browser tactics enhance the effectiveness of these scams. Experts recommend better web filtering and the use of password managers to help protect against these threats.