Quick Summary
Scammers are targeting LinkedIn users with fake comment replies that impersonate the platform, warning of bogus policy violations. These messages often use LinkedIn’s official lnkd.in URL shortener, making phishing links difficult to identify. Users are urged to click on links claiming their accounts are temporarily restricted, which leads to credential harvesting sites. This tactic highlights the need for vigilance against social engineering attacks on professional networking platforms.
The Securityish Brief
Recently, LinkedIn users have been targeted by a phishing campaign that employs fake comment replies to impersonate the platform. The scammers create bot-like profiles that comment on posts, warning users of supposed policy violations and urging them to visit external links. These messages often utilize LinkedIn’s branding and even the official lnkd.in URL shortener, making it challenging for users to discern legitimate communications from phishing attempts.
Victims are misled into believing their accounts have been ‘temporarily restricted’ due to non-compliance with LinkedIn’s policies. The comments often include a link preview that appears legitimate but leads to phishing sites designed to harvest user credentials. For instance, one phishing domain seen in this campaign is very9412.netlify.app, which prompts users to ‘verify’ their identity.
LinkedIn has acknowledged the issue, stating that they are aware of the activity and are taking action against these fake accounts. They emphasize that the platform does not communicate policy violations through public comments and encourage users to report suspicious behavior.
Implications for Users and Organizations
This phishing tactic underscores the importance of being cautious when interacting with comments or messages on social media platforms, especially those that prompt users to click on links. Users should be aware that legitimate companies, including LinkedIn, will not request sensitive information through public comments.
Organizations should educate their employees about the risks of social engineering attacks and encourage them to verify any suspicious communications directly through official channels. Regular training on recognizing phishing attempts can help mitigate the risks associated with such scams.
As this phishing campaign evolves, users should remain vigilant and consider implementing additional security measures, such as two-factor authentication, to protect their accounts from unauthorized access.
- Fake LinkedIn comment replies impersonate the platform to lure users into clicking phishing links.
- Scammers use LinkedIn’s branding and lnkd.in URL shortener to make phishing attempts appear legitimate.
- Victims are led to credential harvesting sites through misleading messages about account restrictions.
- LinkedIn is actively working to address these fake accounts and protect users.
- Users should report suspicious comments and avoid clicking on unknown links.
Key Takeaways
- Be cautious of comments or messages on LinkedIn that prompt you to click on links.
- Verify any claims of account restrictions directly through LinkedIn’s official website.
- Report any suspicious activity or comments to LinkedIn immediately.
- Consider enabling two-factor authentication on your LinkedIn account for added security.
- Educate yourself and your team about recognizing phishing attempts and social engineering tactics.
Key Terms & Concepts
- Phishing: In this article, phishing refers to fraudulent attempts to obtain sensitive information by disguising as a trustworthy entity.
- Credential harvesting: Credential harvesting is the process of collecting usernames and passwords from unsuspecting users through deceptive means.
- Social engineering: Social engineering involves manipulating individuals into divulging confidential information, often through deceptive communications.
Read the original article here: https://www.bleepingcomputer.com/news/security/convincing-linkedin-comment-reply-tactic-used-in-new-phishing/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
