The end goal, besides stealing credentials, could be to compromise said business accounts by running malicious ads on the company's dime, demanding a ransom, or spreading additional scams based on customer trust in the brand.
This scam probably isn't much of a threat unless you respond to the initial email. You shouldn't—but if you did, you'd get a second message with an invitation to schedule an interview with the "Netflix HR team." Clicking through the scheduling link will pull up (fake) interview slots to choose from, and if you select one, you'll be prompted to create or sign into your Netflix "Career Profile" account.
The Malwarebytes team found that if you enter your username and password incorrectly, you'll receive an appropriate response of “The password you’ve entered is incorrect. Please try again!” This makes the login page itself an especially sophisticated element of this attack, as threat actors can intercept and utilize your information in real time.
Job scam red flags
Redirecting to Facebook to schedule an interview is a red flag, though it's not the most obvious one. Many users are accustomed to using Facebook and Google to log into third-party sites. If you actually check the URL on the redirected login page, though, it isn't a Facebook domain.
While you may have received legitimate messages from recruiters via email or on LinkedIn, you should still be wary of offers for positions you haven't applied for or that sound too good to be true. Don't click links without verifying the sender, and don't enter login credentials or provide sensitive information along the way.
There are other job common scams that involve unsolicited offers for dream positions that are fully remote and highly paid. Scammers may also impersonate headhunters and ask you to pay a fee for their application and placement services. Never pay anyone for anything related to hiring or onboarding (unless you have sought out the services of a professional yourself) or agree to deposit checks or purchase gift cards, as this almost always ends with you losing money.
Hence then, the article about this creative phishing scam uses netflix job offers to steal facebook credentials was published today ( ) and is available on Live Hacker ( Middle East ) The editorial team at PressBee has edited and verified it, and it may have been modified, fully republished, or quoted. You can read and follow the updates of this news or article from its original source.
Read More Details
Finally We wish PressBee provided you with enough information of ( This Creative Phishing Scam Uses Netflix Job Offers to Steal Facebook Credentials )
Also on site :