Attackers are running a multi-month phishing campaign impersonating major brands like Netflix, Coca-Cola, Adidas, and FIFA to target marketing professionals. The scam uses fake recruiter emails with job interview lures, routes victims through legitimate services like PeopleForce and Salesforce Marketing Cloud to avoid detection, then presents a fake Google sign-in pop-up to steal credentials. At least 34 impersonating domains have been identified. Key defenses include avoiding unsolicited job offer links, using a password manager (which won't autofill on fake sites), and using real-time web protection.
Table of contents
Something feel off? Check it before you click.53 Impressions