A recent report from Check Point Research has unveiled a startling statistic: LinkedIn, the Microsoft-owned business platform, is impersonated in nearly half of all phishing attacks worldwide.
Scammers often exploit LinkedIn by targeting individuals seeking new job opportunities or career changes. While emails with subject lines like "You have 1 new invitation" or "Your profile has been viewed by 63 people" may appear legitimate, it's crucial to verify the sender's email address to confirm it's genuinely from LinkedIn. These impersonators craft emails that closely mimic authentic ones, directing recipients to fake LinkedIn pages designed to steal their information upon entry.
Another tactic employed by cybercriminals involves creating fake LinkedIn profiles and messaging users about job opportunities. Once they have engaged their targets, they may request a small upfront payment to process an application—money that will never be seen again—or provide a link to a form that is, in reality, a phishing site.
LinkedIn is aware of these issues and is actively working on enhancing its security measures to protect its users. Here are three security features it has already implemented: