The seek for a brand new job, particularly with a gradual labour market within the US, has change into the proper alternative for scammers to lure unsuspecting customers. A brand new report from cybersecurity analysis agency Elegant Safety, launched on October 16, 2025, reveals one more widespread credential phishing marketing campaign<\/a> the place scammers attempt to get your login data, particularly by stealing victims\u2019 Fb login particulars.<\/p>\n In response to Elegant\u2019s weblog publish<\/a>, shared with Hackread.com, targets are lured with pretend job postings, primarily for Social Media Supervisor roles. To extend their possibilities of success, the scammers exploit customers\u2019 belief in well-known, respected manufacturers, together with KFC, Ferrari, and Purple Bull.<\/p>\n Report writer Bryan Campbell famous that the methodology remained the identical throughout all emails, which suggests the scammers used a template or an LLM<\/a> (Massive Language Mannequin) to shortly launch a different wave of assaults. <\/p>\n An LLM is actually a sensible laptop program that may generate human-like textual content, permitting scammers to create many alternative, convincing messages sooner. On this rip-off, the emails often come from trusted companies like Google Workspace<\/a> and Microsoft 365<\/a>.<\/p>\n When the recipient of the lure electronic mail, reminiscent of a message pretending to be from Purple Bull, clicks the job hyperlink, it shortly takes the person to a pretend safety examine with a picture problem. The sufferer is then directed to a pretend job commercial on a web site designed to appear like Glassdoor. The person is prompted to use, which calls for they log in utilizing both their electronic mail or Fb<\/a> account. <\/p>\n After a failed try to log in with electronic mail, the sufferer is offered with a pretend Fb login display. After handing over their login particulars, the sufferer is solely proven a loading bar that by no means reaches 100%, giving the scammers the credentials whereas the person waits in useless.<\/p>\n Elegant Safety researchers famous clear warning indicators, reminiscent of a misleading URL, like Furthermore, the scammers rely closely on Model impersonation as the e-mail options the corporate\u2019s brand and names like \u201cAlexa from Purple Bull Expertise.\u201d Nonetheless, when noticed carefully, there’s a clear mismatch; the sender electronic mail tackle and the reply-to tackle don’t align with the model\u2019s precise web site (How the Lure Works<\/strong><\/h3>\n
Recognizing the Rip-off<\/strong><\/h3>\n
[email\u00a0protected]<\/a><\/code>. This hyperlink is designed to seem as if it results in Purple Bull\u2019s web site, however truly redirects to a separate rebrand.ly<\/code> tackle.<\/p>\nredbull.com<\/code>). Campbell explains that such scams are efficient as a result of they \u201csupply alternatives too attractive to cross up.\u201d<\/p>\n![\"New](\"https:\/\/hackread.com\/wp-content\/uploads\/2025\/10\/Fake-Job-Offers-for-KFC-Red-Bull-Used-to-Phish-Facebook-Passwords.png\")
<\/a>
\n\t\t\t\t\t\t<\/figcaption><\/figure>\n![\"New](\"https:\/\/hackread.com\/wp-content\/uploads\/2025\/10\/Fake-Job-Offers-for-KFC-Red-Bull-Used-to-Phish-Facebook-Passwords-1.png\")
<\/a>
\n\t\t\t\t\t\t<\/figcaption><\/figure>\n![\"New](\"https:\/\/hackread.com\/wp-content\/uploads\/2025\/10\/Fake-Job-Offers-for-KFC-Red-Bull-Used-to-Phish-Facebook-Passwords-2-1024x435.png\")
<\/a>
\n\t\t\t\t\t\t<\/figcaption><\/figure>\n![\"New](\"https:\/\/hackread.com\/wp-content\/uploads\/2025\/10\/Fake-Job-Offers-for-KFC-Red-Bull-Used-to-Phish-Facebook-Passwords-3-1024x539.png\")
<\/a>
\n\t\t\t\t\t\t<\/figcaption><\/figure>\n<\/div>\nA part of a Bigger Risk<\/strong><\/h3>\n