A recent report from Check Point Research has unveiled a startling statistic: nearly half of all phishing attacks globally involve the impersonation of LinkedIn, the business platform owned by Microsoft.
One method scammers use to exploit LinkedIn is by targeting individuals who are seeking new job opportunities or career changes. While emails with subject lines like "You have 1 new invitation" or "Your profile has been viewed by 63 people" may appear legitimate, it's crucial to verify the sender's email address to confirm it genuinely originates from LinkedIn. These impersonators craft emails that look virtually identical to authentic ones, complete with links to counterfeit LinkedIn pages designed to steal your information once entered.
Another tactic employed by cybercriminals involves creating fake LinkedIn profiles to message users about job opportunities. Once they have your interest, they might request a small upfront payment to process your application (which you'll never see again) or direct you to a form that is actually a phishing link disguised as a legitimate application form.
LinkedIn is aware of these issues and is actively working to develop advanced security features to safeguard its users. Here are three of the current security measures it has already implemented:
1. Alert for Suspicious Messages - LinkedIn's technology can identify messages from users who may be trying to lure you off the platform or are communicating inappropriately, and will issue a warning notification.
2. Profile Verification - This feature enables you to confirm the authenticity of your page. By providing an extra form of identification, you can receive a verification badge on your profile, ensuring that viewers can trust your identity. This is particularly valuable as scammers frequently target new victims and create pages that are quickly taken down, making it unlikely for them to maintain updated information.
3. Profile Information - This feature enables you to view the specifics of someone's profile, helping you decide whether to respond to a message, accept a connection request, trust an offer, and more. To access this information under your profile, click "More" and choose "About this profile" from the drop-down menu. You'll then see details such as:
● When the profile was created.
● When the profile was last updated.
● Whether the member has verified a phone number.
● Whether the member has a work e-mail associated with their account.
4. AI-Generated Profile Picture Detection - Scammers increasingly use AI to create realistic profile pictures of non-existent individuals, which they then use to set up fake profiles for fraudulent activities. Alarmingly, research by LinkedIn revealed that most users struggle to visually differentiate between genuine and AI-generated faces. To combat this issue, LinkedIn collaborated with academic institutions to develop and implement sophisticated detection tools. These advanced features enable LinkedIn to identify AI-generated profile pictures and deactivate the associated profiles before they can cause any harm.
Do you use LinkedIn to find jobs, employees, or clients? It's an excellent resource for business opportunities, but maintaining security is crucial. While LinkedIn's features offer a basic layer of protection, they are just the starting point. If someone in your organization were to fall for a scam and click on a malicious link, would your internal security measures be robust enough to safeguard your network?
We can help you find out. We'll do a FREE cyber strategy session to help you determine if your network is vulnerable to any type of attack. To book yours, call us at 707-689-3999 or click here to book now.
