Bogus recruiters go after high-value corporate credentials on mobile

Zimperium warns of a recruitment-themed phishing campaign using the browser-in-the-browser (BitB) technique to trick targets into submitting corporate credentials via fake interview scheduling flows and brand-impersonating domains; attackers enforce corporate email use to capture high-value enterprise access, and researchers tracked hosting patterns and published 46 IOCs tied to the activity.