Skip to content
ExceraScam directory
← Back to directory
Regional / unspecified

Arabic job adverts lead applicants to fake Facebook login pages

Channel

Social media · Website

Target

Individuals

Documented campaign

How the approach works

Researchers observed fake recruitment pages directing applicants through a job landing page to a counterfeit social-media login. The campaign used familiar employer branding and free hosting to give the application process credibility.

What they wanted

Steal Facebook credentials

Reported outcome

Phishing infrastructure and application flow observed. Individual losses and successful compromises for the pictured flow unknown.

Source & context

Group-IB, Sharef Hlal and Olga Ulchenko ↗

Published: 2023-03-21

Free awareness packs
SCREENSHOTS & MESSAGESREG-002
Figure 3: false job landing page on a free hosting service, with a promise of contact within 72 hours and a registration button. Employer identity blurred by the publisher.

Fake recruitment page promising contact within 72 hours. Employer name blurred by the publisher.

Group-IB, Sharef Hlal and Olga Ulchenko

Figure 3: false job landing page on a free hosting service, with a promise of contact within 72 hours and a registration button. Employer identity blurred by the publisher.

Fake recruitment page promising contact within 72 hours. Employer name blurred by the publisher.

ExceraFree to browse. Sources included.Early release. We add cases and review the content over time.