As cited
Copy frozen at (site build).
Bogus recruiters go after high-value corporate credentials on mobile
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Bogus recruiters go after high-value corporate credentials on mobile
Attackers impersonating HR staff at major corporations run fake interview scheduling flows to harvest corporate credentials, leveraging browser-in-the-browser (BitB) overlays and scraped public profile data to appear legitimate. The technique exploits mobile users and targets high-value corporate accounts on desktop environments.
Why it matters: Security teams and employees at well-known companies need to validate interview communications through official channels, as compromised corporate credentials can lead to lateral movement, data theft, and account takeover.
- Source published
- First seen by Cybersecurity Tracker