CONVINCING LINKEDIN COMMENT-REPLY TACTIC USED IN NEW PHISHING

Summary from the TLDR InfoSec newsletter

Scammers are flooding LinkedIn posts with fake reply comments from company pages impersonating LinkedIn (e.g., "Linked Very"), warning users about bogus policy violations and directing them to credential-harvesting sites. The campaign gains credibility by using LinkedIn's official lnkd.in URL shortener to mask phishing domains, making malicious links harder to identify without clicking. LinkedIn confirmed awareness and emphasized that it never communicates policy violations through public comments.