Netflix Phishing Campaign Targets Job Seekers on Facebook

The Netflix phishing campaign is targeting marketing and social media professionals with fake job offers. Attackers use these scams to steal Facebook login credentials and hijack personal and corporate accounts.

How the Scam Works

Victims receive an email that appears to come from a Netflix recruiter. The message includes a link to schedule an interview. Clicking the link leads to a counterfeit Netflix careers site. On the fake portal, applicants are asked to create a “Career Profile” using Facebook login details. Once entered, the credentials are stolen instantly.

Technical Tricks Behind the Attack

The campaign uses a websocket-based setup to capture Facebook logins in real time. This method allows attackers to bypass delays and attempt immediate account access. Even multi-factor authentication may be intercepted if attackers act quickly enough.

Why Job Seekers Are the Target

The phishing campaign focuses on marketing and social media professionals. These individuals often manage company or brand Facebook pages. By stealing their accounts, attackers gain control of valuable platforms. They can then run malicious ads, spread scams, or demand ransom payments to return access.

Risks and Consequences

The consequences extend beyond stolen personal accounts. Once criminals take over a business-managed page, they can damage brand reputation and exploit followers. Unauthorized ads can drain budgets, while compromised profiles can harm trust between companies and their audiences.

Protecting Against the Scam

Job seekers should verify recruiter emails before clicking links. Navigating directly to official career pages instead of using emailed links reduces risk. Multi-factor authentication remains valuable, but vigilance is the strongest defense. Companies should also train employees to recognize job-related phishing attempts.

Conclusion

The Netflix phishing campaign shows how criminals exploit career ambitions to steal Facebook accounts. By targeting professionals with access to brand pages, attackers aim for wider damage than personal theft alone. Awareness, verification, and cautious online behavior remain the best defenses against such sophisticated schemes.