Latest Phishing Campaign Steals Jobs Portal User Credentials

  • A new phishing campaign out there focuses on stealing user credentials from the "Indeed" employment website.
  • Cybercriminals have succeeded in tricking many people through fake emails that persuade users to give away account credentials.
  • This happens through a fake header that makes the email seem legit at first glance.

An ongoing phishing campaign targeting users of the employment website called Indeed was discovered by the Bitdefender Antispam Lab. The researchers' report says that 48% of the fraudulent emails have reached users in the US, 28% in Ireland, 5% in Finland, 3% in France and India, and 2% in Germany.

The cybercriminals send spoofed emails with a forged email header that reads "employers-noreply@indeed.com," so it seems to be legit communication coming from the job-listing portal. They ask the recipients to confirm their Indeed user email address by downloading the attachment and logging into their account after that.

Source: bitdefender.com

The attachment, which is named “Indeed_Update.html,” opens a fake web page with a login form that has their email address already filled in, so the victim only needs to type in their password.

Source: bitdefender.com

As expected, Indeed users who find this email in their inbox need to keep away from it, so do not open it - and definitely do not enter your password. The researchers advise recipients to delete the email and access the official Indeed website from a browser - or, if it's already too late for that, to just reset their password as soon as possible on the employment website and anywhere else they are using the same credentials.

However, this job portal happens to send a verification email to users during the sign-up process, but it only asks new users to confirm their email address by clicking on a link. So, that should be the only time when this email is legit, but it's always wise to check for fraud signs before engaging with any received email.

REVIEW OVERVIEW

Latest

How to Watch Dallas Mavericks Games Online Without Cable

In recent years, the Dallas Mavericks have established themselves into a perennial playoff team, and the future looks very bright for them....

MacBook Black Friday Deals (2021) – Steepest Discounts on M1 & Intel-based MacBooks!

Are you impressed by Apple's powerful M1 chip? Or maybe you want a newer Intel-based Mac? Need a laptop for everyday use,...

iPhone 13 Black Friday Deals (2021) – Save Hundreds of Dollars on the Latest iPhones!

If you've been looking to upgrade to an iPhone 13 model, this year's Black Friday offers a unique opportunity to do so....
For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: Chrome, Edge, Firefox, Safari