Phishing Campaign Impersonates Palo Alto Networks Recruiters

Unit 42 reports a targeted social-engineering campaign in which attackers impersonate Palo Alto Networks recruiters — using scraped LinkedIn data and an ATS-formatting pretext — to coerce senior job candidates into paying for resume “CV expert” services or opening suspicious attachments; the advisory includes indicators of look-alike domains, verification steps, and a zero-payment policy to help users avoid the scam.