"[Confidential] Access the promotion list in advance via VPN" Deceptive phishing emails are spreading; "salary revision" and "transportation expense revision" versions also circulating

Phishing emails in Japan are posing as internal HR and payroll notices, including salary changes, evaluations, promotion lists, and commuting expense rule updates.

The messages use realistic workplace themes and internal-looking sender names to appear trustworthy.

Recipients are urged to open linked pages via VPN and told not to share the information, a tactic meant to pressure quick clicks.

The campaign risks credential theft and data compromise by steering employees to malicious links or fake login pages.