Severity: HighIncidentNHI/credential
Fake job-interview phishing targets Google credentials at marketing professionals, impersonating major brands including OpenAI
Global
Live intelligence. Items are aggregated from public sources and summarised automatically. Always verify against the linked source before acting.
A phishing campaign masquerades as legitimate job interviews from over 30 recognized companies—including OpenAI—to harvest Google account credentials from marketing professionals. Attackers gain access to cloud identities and potentially downstream services tied to those accounts. The campaign demonstrates how credential theft targeting cloud-connected workforce identities can expose both corporate and AI infrastructure.
What to do
Enforce phishing-resistant MFA and conditional access policies tied to identity risk signals across all cloud services.
Mapped framework pillars
Sources
#phishing#credential theft#Google accounts#identity compromise#cloud access#social engineering
