How Phishers Are Slinking Their Links Into LinkedIn
Summary: LinkedIn's marketing redirect feature, which creates links in the format linkedin.com/slink?code= followed by a short alphanumeric variable, is being used by phishers to bounce victims to spoofed pages for Microsoft, Adobe, the IRS, Amazon and PayPal. Urlscan.io data cited in the report shows dozens of recent phishing attacks using these Slinks, including samples dated Jan. 12, Jan. 31, Feb. 3 and Nov. 26, and Fortinet documented the same abuse in 2016.
What's compelling: Because LinkedIn is widely treated as a trusted domain and the redirect hides the final destination, these phishing emails are unlikely to be caught by anti-spam or anti-malware filters - and Check Point found roughly 45 percent of all brand phishing attempts globally target Microsoft, LinkedIn's parent company.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026