LinkedIn phishing is rising, with 34% of attacks occurring outside email. Key reasons include:
- Bypasses traditional security tools since LinkedIn DMs evade email security protections.
- Cheap and easy for attackers, leveraging legitimate account hijacking.
- Facilitates targeting high-value individuals due to easy reconnaissance.
- Users more likely to trust messages from familiar contacts.
- Potential rewards are high because breaches can compromise core business accounts and data.
Organizations must adapt security to guard against these threats across multiple channels, not just email.
https://www.bleepingcomputer.com/news/security/5-reasons-why-attackers-are-phishing-over-linkedin/