Cybercriminals are using a phishing scam posting fake “official” LinkedIn comments to steal login credentials.
In this week’s scam, you post on LinkedIn and then receive what appears to be an official reply from LinkedIn’s website. The reply appears as a comment on your post and warns that your account has been temporarily restricted because you’ve violated the platform’s policies. It contains the LinkedIn logo and instructs you to select a link to resolve the issue and regain access to your account.
But this “official” comment is actually fake! Even though the logo and alarming message about a policy violation seem real, the reply you received is actually from a cybercriminal. If you select the link in the comment, you’ll be directed to a fake webpage that contains a Verify your identity button. If you select the button and enter your username and password, cybercriminals will steal both your login information and your account!
Tips to Stay Safe
Follow these tips to avoid falling victim to a phishing scam:
- Remember that LinkedIn will never communicate policy violations through public comments on your posts.
- Be suspicious of comments that use alarming language or threaten account suspension. Cybercriminals often try to create a sense of urgency to trick you into clicking without thinking.
- If you encounter suspicious comments or replies that impersonate LinkedIn, report them immediately so the platform can take appropriate action and protect other users.
Stop. Look. Think. And don’t be fooled.
Tips of the Week Brought to You By Our Partners at KnowBe4
KnowBe4 is the world’s most popular integrated platform for awareness training combined with simulated phishing attacks. Let Keller Schroeder show you how KnowBe4 has helped thousands of organizations just like yours manage the continuing problem of social engineering. Contact us today to learn more.
