[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEY4DHWh_sbKGF0dhVYkjM6vxQ_vWvD8sVaAy1ZOXYCI":3},{"article":4,"iocs":48,"watch_terms":58,"solutions":59,"lesson":148},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"43cda713-2acf-4937-aa6c-b455282adae6","Phishing poses as big-brand job interview to steal Google accounts","phishing-poses-as-big-brand-job-interview-to-steal-google-accounts-6f6081","A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials from marketing professionals. [...]","A sophisticated phishing campaign is targeting marketing professionals by impersonating over 30 well-known brands like Adobe, Netflix, and OpenAI. The attackers use fake job interview lures, leveraging legitimate platforms like PeopleForce and Salesforce Marketing Cloud, to trick victims into revealing their Google account credentials through a browser-in-the-browser attack.","Phishing campaign impersonates big brands in fake job interviews to steal Google account credentials.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fphishing-poses-as-big-brand-job-interview-to-steal-google-accounts\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F06\u002Fhacker-looking-for-work-question.jpg","2026-07-06T20:27:37+00:00","2026-07-06T22:00:18.813832+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"Google","vendor",{"name":21,"type":19},"Adobe",{"name":23,"type":19},"Netflix",{"name":25,"type":19},"Coca-Cola",{"name":27,"type":19},"OpenAI",{"name":29,"type":19},"Salesforce","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":30,"icon":32,"name":33,"slug":34},null,"Threat Intelligence","threat-intelligence",[36,41,46],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":47},{"id":30,"icon":32,"name":33,"slug":34},[49,53,55],{"type":50,"value":51,"context":52},"domain","exct[.]net","Domain used in the redirect chain for phishing.",{"type":50,"value":54,"context":52},"wiseagent[.]com",{"type":50,"value":56,"context":57},"adidas-hiring[.]com","Example malicious landing page domain.",[18,21,23],{"controls":60,"vendors":142},[61,90,116],{"slug":62,"name":63,"problem":64,"products":65},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":91,"name":92,"problem":93,"products":94},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[95,100,108],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":96,"product_name":97,"url":98,"description":99},"defender-for-office-365","Microsoft Defender for Office 365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365","Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"slug":117,"name":118,"problem":119,"products":120},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[121,128,134],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":122,"product_name":125,"url":126,"description":127},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":129,"product_name":130,"url":132,"description":133},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",[143],{"slug":144,"name":18,"logo_path":145,"roles":146},"google","\u002Fvendor-logos\u002Fgoogle.png",[147],"affected",{"slug":149,"title":150,"body":151,"framework_refs":152,"framework_notes":162},"fake-job-interview-phishing-steals-google-credentials-via-browser-in-the-browser-attack","Fake Job Interview Phishing Steals Google Credentials via Browser-in-the-Browser Attack","Attackers are exploiting the trust professionals place in well-known brands by crafting convincing fake job interview scenarios that impersonate over 30 major companies. By abusing legitimate SaaS platforms like Salesforce Marketing Cloud and PeopleForce for delivery, the malicious emails bypass standard reputation-based email filters. The browser-in-the-browser technique renders a fake login popup that appears visually identical to a real Google authentication page, making it extremely difficult for untrained users to detect. This attack highlights that even cautious users can be deceived when attackers weaponize brand credibility and trusted infrastructure simultaneously. Credential theft of this nature can cascade into full account takeovers, data breaches, and lateral movement across connected services.",[153,154,155,156,157,158,159,160,161],"CIS Control 14 - Security Awareness and Skills Training","CIS Control 6 - Access Control Management","NIST SP 800-53 AT-2 (Security Awareness Training)","NIST SP 800-53 IA-5 (Authenticator Management)","NIST SP 800-63B (Digital Identity Guidelines - Phishing-Resistant MFA)","NIST CSF PR.AT-1 (Awareness and Training)","GDPR Article 32 (Security of Processing)","MITRE ATT&CK T1566.002 (Phishing: Spearphishing Link)","MITRE ATT&CK T1185 (Browser Session Hijacking)",{}]