A CSC report describes real-world scams where criminals impersonate executives and brands online to steal personal or payment information. Examples include fake CEOs contacting people on LinkedIn with bogus job offers, and lookalike “FIFA” domains used for fake ticket sales, travel offers, and giveaways. The report warns that AI is making these impersonation and brand-abuse scams faster to create and harder to spot.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: a LinkedIn DM, “Hi, I’m the CEO, I saw your profile and have a confidential opportunity.” CSC reports fake chief executives doing exactly this on LinkedIn, offering bogus jobs, then asking for your resume, phone, even ID details to use in later attacks. Same play with fake FIFA sites: CSC found over sixty-five thousand ‘FIFA’ domains, some selling fake tickets, travel, and giveaways to grab your card and personal data. Here’s the move: if a ‘CEO’ or ‘FIFA offer’ shows up out of nowhere, stop. Don’t reply or pay, open our official site or directory and verify through that, first.
The article describes how “wrong-number” SMS messages are used as a first-step social engineering test to identify people who will engage with strangers. If the target replies, scammers may either build a long relationship that leads to fake investment fraud (“pig butchering”) or recycle the…
An alleged North Korean operation called “WaterPlum” targeted job seekers by posing as AI and blockchain companies and using the interview process to trick applicants into downloading malicious files. Authorities say the campaign infected tens of thousands of devices worldwide and led to theft from…
Researchers found a large recruitment-themed phishing campaign where victims receive unsolicited interview invites and are sent to fake scheduling or recruitment pages. The pages use “Browser-in-the-Browser” fake login popups to steal Google/Facebook passwords and, in some cases, capture MFA codes…
Researchers and the FBI warn that criminals are luring World Cup fans to convincing fake FIFA ticket websites, often via social media ads and shared links. The scam steals payment details in real time during checkout, including card data and one-time passcodes (OTPs), while victims believe they are…
Scammers are using realistic LinkedIn recruiter profiles and even verified company pages to post fake jobs that push people to off-platform sites or email addresses. The scams aim to take money (e.g., paid “resume help”) or collect sensitive personal data like driver’s licenses or Social Security…
Researchers observed a coordinated social-engineering operation (“Spring Ring”) where attackers used external Microsoft Teams accounts to pose as internal IT help desk staff and start voice calls. Victims were pressured to install remote-control tools (like Quick Assist or other RMM software) or…
