Convincing LinkedIn comment-reply tactic used in new phishing
BleepingComputer
Actively Exploited
Scammers are targeting LinkedIn users with a new phishing tactic that involves fake comments appearing as replies to legitimate posts. These comments, which resemble official LinkedIn notifications, falsely warn users about policy violations and encourage them to click on malicious external links. Some attackers are even using LinkedIn's own lnkd.in URL shortener, making it more difficult for users to recognize these attempts as scams. This tactic is particularly concerning as it exploits the trust users have in the platform, potentially compromising personal and professional information. LinkedIn users should be cautious and verify the authenticity of comments before clicking on any links.
Impact: LinkedIn users, especially professionals using the platform for networking and job searching.
Remediation: Users should verify the authenticity of comments and links before clicking, report suspicious activity to LinkedIn, and consider adjusting privacy settings to limit exposure.