Fake Interview Phishing Campaign Impersonates Top Brands to Steal Gmail Credentials

Gbhackers •Mayura Kathir • July 7, 2026

A sophisticated interview-themed phishing campaign that impersonates major global brands to harvest Gmail credentials. Attackers pose as recruiters offering marketing roles at well-known companies, leveraging personalized targeting and a layered redirection chain that uses legitimate platforms to mask malicious intent. The result is a convincing lure that directs recipients to a Gmail credential prompt embedded […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Targets Marketing Professionals with Fake Job Offers A phishing campaign has emerged, impersonating over 30 well-known brands, including Adidas, Netflix, and Coca-Cola, to steal Google account credentials from marketing professionals. The attackers use fake job offers and impersonate real recruiters, employing a sophisticated redirect chain through legitimate platforms like PeopleForce and Salesforce Marketing Cloud. Victims receive emails that appear authentic, complete with real names and photos of recruiters, luring them to click links that lead to a fake Google sign-in page. This campaign has been active for at least five months and is notable for its use of browser-in-the-browser techniques to mask malicious intent. Security researchers from Team Cymru have documented the operation, highlighting the effectiveness of nested redirects in avoiding detection. The phishing emails often include personalized targeting, increasing the likelihood of success. The scale of this operation is broader than typical phishing campaigns, affecting a significant number of job seekers. 7 sources 68

Extracted Entities

Fake Interview Phishing Campaign Impersonates Top Brands to Steal Gmail Credentials

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Tools (1)