Open Forum

If you use LinkedIn for business or networking, you may have received emails with Smart Links from your contacts. These links track your engagement with the content and show you as a trustworthy source. However, cybercriminals also use these Smart Links to deceive you into providing your Microsoft account login credentials. 

So, how does the phishing attack work exactly? The criminals create or hijack LinkedIn business accounts and then send emails containing Smart Links to their targets. The email subjects may be related to payments, human resources, documents, security notifications, or other topics. The Smart Links appear to be from LinkedIn (and looks like https://linkedin[.]com/slink?code=hsgdshj454#53gdGWshg545==), but they are actually fraudulent and will redirect you to a fake Microsoft login page. The phishing page is carefully crafted to look authentic and is pre-filled with your email address to appear even more legitimate. All you have to do is enter your password and click the sign-in button. However, once you do that, the criminals will steal your login credentials, and you'll be redirected to a genuine Microsoft page.

How can you protect yourself from this attack?

• Be suspicious of any email that asks you to click on a link or open an attachment, especially if it comes from an unknown or unexpected (LinkedIn) sender
• Check the sender's email address and the link's URL carefully. Look for spelling errors, typos, or unusual characters that may indicate a fake domain
• Use a strong and unique password for your Microsoft account and enable two-factor authentication (2FA) for extra security
• Please report any suspicious emails to LinkedIn and Microsoft and delete them from your inbox

#ALTACyber

Thanks for sharing

If you use LinkedIn for business or networking, you may have received emails with Smart Links from your contacts. These links track your engagement with the content and show you as a trustworthy source. However, cybercriminals also use these Smart Links to deceive you into providing your Microsoft account login credentials. 

So, how does the phishing attack work exactly? The criminals create or hijack LinkedIn business accounts and then send emails containing Smart Links to their targets. The email subjects may be related to payments, human resources, documents, security notifications, or other topics. The Smart Links appear to be from LinkedIn (and looks like https://linkedin[.]com/slink?code=hsgdshj454#53gdGWshg545==), but they are actually fraudulent and will redirect you to a fake Microsoft login page. The phishing page is carefully crafted to look authentic and is pre-filled with your email address to appear even more legitimate. All you have to do is enter your password and click the sign-in button. However, once you do that, the criminals will steal your login credentials, and you'll be redirected to a genuine Microsoft page.

How can you protect yourself from this attack?

• Be suspicious of any email that asks you to click on a link or open an attachment, especially if it comes from an unknown or unexpected (LinkedIn) sender
• Check the sender's email address and the link's URL carefully. Look for spelling errors, typos, or unusual characters that may indicate a fake domain
• Use a strong and unique password for your Microsoft account and enable two-factor authentication (2FA) for extra security
• Please report any suspicious emails to LinkedIn and Microsoft and delete them from your inbox

#ALTACyber

Thanks for sharing

If you use LinkedIn for business or networking, you may have received emails with Smart Links from your contacts. These links track your engagement with the content and show you as a trustworthy source. However, cybercriminals also use these Smart Links to deceive you into providing your Microsoft account login credentials. 

So, how does the phishing attack work exactly? The criminals create or hijack LinkedIn business accounts and then send emails containing Smart Links to their targets. The email subjects may be related to payments, human resources, documents, security notifications, or other topics. The Smart Links appear to be from LinkedIn (and looks like https://linkedin[.]com/slink?code=hsgdshj454#53gdGWshg545==), but they are actually fraudulent and will redirect you to a fake Microsoft login page. The phishing page is carefully crafted to look authentic and is pre-filled with your email address to appear even more legitimate. All you have to do is enter your password and click the sign-in button. However, once you do that, the criminals will steal your login credentials, and you'll be redirected to a genuine Microsoft page.

How can you protect yourself from this attack?

• Be suspicious of any email that asks you to click on a link or open an attachment, especially if it comes from an unknown or unexpected (LinkedIn) sender
• Check the sender's email address and the link's URL carefully. Look for spelling errors, typos, or unusual characters that may indicate a fake domain
• Use a strong and unique password for your Microsoft account and enable two-factor authentication (2FA) for extra security
• Please report any suspicious emails to LinkedIn and Microsoft and delete them from your inbox

#ALTACyber

Thanks for sharing

If you use LinkedIn for business or networking, you may have received emails with Smart Links from your contacts. These links track your engagement with the content and show you as a trustworthy source. However, cybercriminals also use these Smart Links to deceive you into providing your Microsoft account login credentials. 

So, how does the phishing attack work exactly? The criminals create or hijack LinkedIn business accounts and then send emails containing Smart Links to their targets. The email subjects may be related to payments, human resources, documents, security notifications, or other topics. The Smart Links appear to be from LinkedIn (and looks like https://linkedin[.]com/slink?code=hsgdshj454#53gdGWshg545==), but they are actually fraudulent and will redirect you to a fake Microsoft login page. The phishing page is carefully crafted to look authentic and is pre-filled with your email address to appear even more legitimate. All you have to do is enter your password and click the sign-in button. However, once you do that, the criminals will steal your login credentials, and you'll be redirected to a genuine Microsoft page.

How can you protect yourself from this attack?

• Be suspicious of any email that asks you to click on a link or open an attachment, especially if it comes from an unknown or unexpected (LinkedIn) sender
• Check the sender's email address and the link's URL carefully. Look for spelling errors, typos, or unusual characters that may indicate a fake domain
• Use a strong and unique password for your Microsoft account and enable two-factor authentication (2FA) for extra security
• Please report any suspicious emails to LinkedIn and Microsoft and delete them from your inbox

#ALTACyber