A phishing campaign is impersonating more than 30 major brands, including Adobe, Netflix, Coca-Cola, and OpenAI, to lure marketing professionals into fake job interviews and steal their Google account credentials. The operation uses legitimate services and fake recruiter identities to build trust, then sends victims through nested redirects to a malicious Google sign-in page. #Adobe #Netflix #CocaCola #OpenAI #PeopleForce #SalesforceMarketingCloud #TeamCymru
Keypoints
- The campaign impersonates over 30 well-known brands across multiple industries.
- It targets marketing professionals with fake job interview invitations.
- The attackers abuse PeopleForce and Salesforce Marketing Cloud in the redirect chain.
- Real recruiter names and photos are used to make the phishing emails seem trustworthy.
- The final page uses a browser-in-the-browser trick to steal Google account credentials.