However, when looking closer it is clear that the sender name reads Linkedin (an improper spelling of the brand’s name) and the email address is not associated with LinkedIn. At first glance, the sender looks to be LinkedIn, the global brand used for connecting with colleagues and individuals around the world. The subject of this email evoked a sense of urgency in the victims, with a subject reading, We noticed some unusual activity. Techniques used: Social engineering, brand impersonation, replicating existing business workflows, malicious URL The Email SummaryĮmail security bypassed: Google Workspace email security The email attack had a socially engineered payload, bypassed Google email security and had the potential to compromise close to 500 users if it weren’t for Armorblox successfully identifying this brand impersonation attempt and stopping this malicious email attack. Attackers targeted employees at a national travel organization, with an email attack that spoofed the global brand LinkedIn in an attempt to steal victims’ login credentials. In today’s Blox Tale, we will dive into the details of a credential phishing attack that spoofed everyone’s favorite platform for connecting with colleagues and professional networks.

Linkedin mailing