New Phishing Campaign Spreads Via LinkedIn Comments

A widespread phishing campaign is abusing LinkedIn comment replies to impersonate LinkedIn, claim accounts are restricted, and provide links to convincingly spoofed login portals that harvest Google, Microsoft, or Apple credentials. Attackers use bots and LinkedIn’s official URL shortener (lnkd.in) to make the messages appear legitimate; LinkedIn confirms it does not communicate policy violations via public comments and is taking action. Users are advised not to interact with such comments or click external links and to report suspicious behavior.