Fake Job Offers Impersonate Netflix, OpenAI, and FIFA to Steal Google Credentials

A sophisticated phishing campaign impersonating 34+ well-known brands (including Netflix, Coca-Cola, OpenAI, and FIFA) targets marketing professionals by routing fake recruitment workflows through legitimate HR and marketing platforms (PeopleForce, Salesforce Marketing Cloud) and presenting fake Google sign-in pages to harvest credentials; operators also impersonate recruiters to increase trust and the operation has been active for at least five months, with recommended mitigations including MFA and monitoring for domain impersonation.