They thought they had found jobs at big companies. In reality, they were being deceived: this is how the scam works

NordVPN detected a phishing campaign that impersonates major brands through fake job offers.

Attackers lure job seekers with cold recruitment emails, intermediary domains, and bogus hiring pages.

The flow ends at a fraudulent Facebook login designed to steal account credentials.

The campaign exploits urgency and trust among job seekers to capture social account logins.