Job seekers face a harsh market, and scammers are exploiting the desire to land positions at high‑profile companies. A new phishing effort uses counterfeit interview invitations that mimic brands such as Adidas, Netflix, Adobe, and FIFA to harvest Google account credentials.
The scheme launches with a seemingly legitimate email from a “recruiter” claiming to represent one of more than 34 well‑known firms. Recipients are directed to a calendar link that redirects through multiple stages, ultimately landing on a counterfeit interview scheduling page.
Once there, users encounter a fake Google sign‑in prompt that mirrors the official authentication window. This “browser‑in‑the‑browser” trick captures login information before the victim realizes they have been deceived. The attackers employ a legitimate HR platform and a domain associated with a major cloud service to lend credibility to the fraudulent site.
Marketing professionals and candidates for roles in technology, hospitality, travel, food, entertainment, and luxury goods are primary targets. Similar recruitment email campaigns have surfaced in the past, underscoring the persistence of this tactic.
Indicators of a scam include unsolicited outreach, offers that appear too attractive, and links that do not match the company’s official domain. Checking the company’s careers page directly and inspecting the final URL for subtle alterations can help verify authenticity. A prompt for single‑sign‑on credentials—such as Google, Apple, or Facebook—during the interview setup is a red flag, and password managers will not auto‑fill on unfamiliar sites.
Job seekers should remain vigilant, verify any unexpected recruiter communications, and use caution before sharing login details or financial information. Staying informed and double‑checking the legitimacy of interview invitations can protect candidates from falling victim to these evolving phishing schemes.
