Phishing campaign targets marketing professionals via fake job interviews

Affected Systems

Marketing professionals with Google accounts; campaign impersonates 30+ brands including Adobe, Netflix, Coca-Cola, OpenAI. Credential theft targeting Google accounts specifically.

Exploitation Status

Active campaign in the wild. Social engineering attack using brand impersonation and fake recruitment lures to harvest Google credentials.

Business Impact

High risk to organizations employing marketing staff. Compromised Google accounts can lead to business email compromise, data exfiltration, lateral movement into corporate systems, and supply chain attacks. Marketing teams often have access to brand assets, customer data, and external communication channels.

Urgency

🟠 Within 24 hours

Recommended Actions

• Alert HR and marketing departments about fake recruitment campaigns impersonating major brands
• Enforce phishing-resistant MFA (FIDO2/WebAuthn) on all Google Workspace accounts, prioritize marketing and external-facing teams
• Review Google Workspace audit logs for suspicious OAuth grants, new device enrollments, and unusual geographic logins in marketing user accounts
• Implement email filtering rules to flag external messages containing job interview or recruitment keywords combined with credential request patterns
• Conduct targeted security awareness training for marketing staff on recruitment-themed phishing tactics and credential harvesting techniques