BushidoUK

Fake Interviews Offered at Top Brands to harvest Gmail creds

• Phishing email sent posing as a recruiter looking to hire people for marketing roles
• The email addresses the individual by their name and the individual works in the relevant field, therefore the attackers likely did some relevant research and collection
• The target is then directed to click a link to book a meeting and is asked to provide their Gmail credentials

Phishing Workflow Summary

The attacker is using nested redirects across different legitimate platforms:

1. ⁠The email was sent via PeopleForce (peopleforce[.]io)⁠ a genuine, cloud-based Human Resource Management (HRM) and Applicant Tracking System (ATS) platform.