LOOK MOM HR APPLICATION LOOK MOM NO JOB

Summary from the TLDR InfoSec newsletter

Cybercriminals are now exploiting trusted collaboration platforms, such as Zoom, to execute highly convincing phishing attacks. By sending what appears to be legitimate HR documents via Zoom, attackers redirect recipients to a fake “bot protection” page and then to a Gmail login imitation designed to steal credentials. Credentials entered on this page are exfiltrated in real-time over a WebSocket connection, allowing attackers to validate and use them swiftly.