Do you use LinkedIn? If so, beware of this new direct messaging attack targeting business executives. Here’s what you need to know and do.
, are all, sadly, par for the cybersecurity news headlines course these days. What isn’t is attacks that focus on LinkedIn, the professional and business network ing platform that boasts more than a billion users.
If you are one of them, then I apologize, but you need to be aware of just such an occurrence. The last time I wrote a LinkedIn-specific news story was way back in February, when I warned of a Lazarus attack that. That LinkedIn doesn’t feature more in security news reports is a good thing; it means the platform is doing something right. This latest warning, however, is worth taking seriously, as the attackers are targeting the right users — at least in terms of potentially profitable outcomes. Push Security researcher Dan Green hasthat business executives on the networking platform are vulnerable to a “high-risk LinkedIn phishing attack,” via the LinkedIn direct messaging resource. This is particularly worrying because LinkedIn itself, “while often used for work and commonly accessed from corporate devices,” Green warned, “sits outside the purview of enterprise security tools, exploiting a visibility and control blind spot.” In the case detailed by Green, in technical glory for those who like such things, the victim received a malicious LinkedIn direct message which redirected them a total of three times, through Google Search, a supposed payroll site and ultimately to a custom landing page hosting various documents. “Upon clicking on one of the document links on the page, the victim is prompted to view with Microsoft,” and, well, you can probably guess the rest. A cloned Microsoft page requires credentials to be entered and 2FA authentication to be completed, at which point the attacker has that Microsoft session stolen. Using LinkedIn to launch such attacks is a clever move by threat actors, not least as many users will be expecting contacts from outside of their organization to talk about work. By not using email, this also adds to the detection-evasion toolkit. The attackers then used a chain of legitimate sites to avoid being flagged as suspicious and to cloak the ultimate URL destination.. “Just because the attack happens over LinkedIn doesn’t lessen the impact,” Green said, “these are corporate credentials and accounts being targeted, even if it is nominally a ‘personal’ application.” I reached out to LinkedIn, and a spokesperson provided the following statement: “Sophisticated phishing scams are a problem across the internet, and our teams use a variety of automated technology and trained investigation experts to detect and stop harmful behavior. Our freeenable members to make more informed decisions on who they’re interacting with. We also proactively share safety tips including how to report any suspicious messages to us, and how to enable the optional
Linkedin Attack Linkedin Phishing Linkedin Fraud Phishing Scams Microsoft Business Network Executives Targeted In Linkedin Attack Push Security
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Laid-off Amazon workers turn to TikTok and LinkedInBusiness Insider tells the global tech, finance, stock market, media, economy, lifestyle, real estate, AI and innovative stories you want to know.
Read more »
Off-camera hearings for Charlie Kirk's suspected assassin raise warning from legal expertFox News Channel offers its audiences in-depth news reporting, along with opinion and analysis encompassing the principles of free people, free markets and diversity of thought, as an alternative to the left-of-center offerings of the news marketplace.
Read more »
Winter Storm Warning as 17 Inches of Snow To StrikeAlaska’s Klondike Highway could see up to 17 inches of snow as the NWS warns of dangerous travel and urges emergency-only trips.
Read more »
Why heart attacks are more dangerous in the morning: A warning before the time changeDid you know that heart attacks in the early morning are more severe and deadlier than those later in the day?
Read more »
Slop bowl stocks are falling on Chipotle's outlook warningBusiness Insider tells the global tech, finance, stock market, media, economy, lifestyle, real estate, AI and innovative stories you want to know.
Read more »
LinkedIn DM Attack Warning — What Users Need To KnowDo you use LinkedIn? If so, beware of this new direct messaging attack targeting business executives. Here’s what you need to know and do.
Read more »