Phishing Campaign Targets Job Seekers with Fake Disney and Coca-Cola Ads

• •Over 800 phishing domains impersonate major brands like Disney and Coca-Cola.
• •Scammers target job seekers, particularly in marketing and communications roles.
• •Fake login pages convincingly mimic legitimate sites to capture credentials.

A phishing campaign is using fake job interview invitations from Disney and Coca-Cola to steal passwords and workplace logins. Cybersecurity researchers at NordVPN have identified 813 phishing domains linked to this operation, which impersonates recruiters from over 75 major companies, including Nike, Nvidia, and Adobe. The scam typically starts with an email or message from someone posing as a recruiter, often using the name and photo of a real employee. Victims are directed to a fake Calendly-like page to schedule interviews and are then prompted to log in using Google credentials. The fraudulent login window can convincingly mimic legitimate sites, allowing attackers to capture passwords and verification codes in real-time. The campaign appears to specifically target individuals in marketing and communications roles, where compromised accounts can lead to significant corporate access. Experts emphasize the need for job seekers to verify unexpected recruitment approaches independently. The sophistication of these scams is increasing, making it crucial for candidates to remain vigilant.