Elena G.

I tried to WARN everyone about LINKEDIN... what I wrote in my last post
"Do NOT use LinkedIn! They ask for your ID, passport, work ID, DL, etc. THAT is a VIOLATION of your rights & Privacy Act. It's a hacker's & fraudster's dream come true! It's a matter of time before it will be on the news soon about LinkedIn getting hacked, ID theft, or other bad news..." LinkedIn is NOT safe b/c they don't practice what they preach about safe browsing etc-they won't even respond to people's requests/needing assistance-customer service is crap, the jobs are crap and most are expired or fraud/sham, it has become a social media political hotbed, and those who don't agree (liberal, democrat, CRT, woke, LGBTQ bull$#*! artists/$#*!heads) to report you to your bosses/job. You are being $ET UP to be terminated for your political (republican, conservative, religious, honest, ethical, and moral views) and other. They charge you A LOT for their trainers/training and WHERE is that money going and HOW does it truly help you in today's competitive and RIGGED job market (some places are telling HR to NOT hire white people only minorities/freaks/woke/CRT and Liberals) that mostly hire who they want anyway (nepotism). People use LinkedIn to see what side of the POLITICAL realm you are on or if you agree/disagree with the LIBERAL agenda-if not then you are targeted to NOT be hired, reported to your company/boss for your views or postings, etc.

Here is an article on the Malwarebytes site about LinkedIn

ATTACKER$ DEMAND RAN$OM$ for $TOLEN LINKEDIN ACCOUNT$
Posted: August 18,2023, by Pieter Arntz

An ongoing campaign targeting LinkedIn accounts has led to victims losing control of their accounts, or being locked out following repeated login attempts.

Whether the attackers are using brute force methods or credential stuffing isn't known, but because some victims are being locked out following a great number of failed attempts, you might suspect brute force methods. It's also not unthinkable that the attackers are using a combination of attack methods. Credential stuffing is a popular tactic of attempting to access online accounts using username-password combinations acquired from breached data. In a brute force attack, attackers typically try a lot of common passwords.

Either way, victims are complaining about slow response times.

The campaign is targeting LinkedIn users all over the world. It pressures the victims that have lost control of their accounts into paying a ransom to avoid having their accounts deleted by the attackers.

Victim asking for help: Someone has hacked my account and asking for money and NO response from LinkedIn Help

The X account of LinkedIn Help is swamped with similar messages

Victims are usually made aware of the take-over by a notification that the email address associated with their account has changed. In many of the examples, we saw the new email address was linked to the Russian "rambler.ru" service. This does not necessarily mean the attack is originating from Russia, but it's not unthinkable that the accounts will be used in disinformation campaigns. According to one victim we spoke to the attackers added fake accounts to their connections.

But the accounts could also be used to distribute malware, phishing campaigns, or other types of fraud. And if that's the case, the deletion of the account sounds better to me than having your reputation damaged.

From complaints seen by BleepingComputer, LinkedIn support has not been helpful in recovering the breached accounts, with users just getting frustrated by the lack of response.

The LinkedIn Help account has pinned a message to say:

"Hey there! We're experiencing an uptick in questions from our members, causing longer reply times. Rest assured, we're doing our best to assist you! For account-specific inquiries, please DM us the details and your email address. We appreciate your patience. Thanks! "
The best defense against brute force attacks, credential stuffing, and other password attacks, is to set up two-step verification.

Setting up MFA for LinkedIn with Okta turned out to be painful because LinkedIn does not provide a QR code but a secret key which is so long that it's hard to get it right the first, or second time. But since it's safer than using the SMS 2FA, this is how it's done:

Open Settings & Privacy
Under Sign-in & security
Select Two-step verification
Set the option to on and you will be presented with two choices
Choose the Authenticator app method and follow the instructions from there
You will receive an email confirming the change that tells you: From now on, you can use your authenticator app to get a verification code whenever you want to sign in from a new device or browser.

Malwarebytes EDR and MDR remove all remnants of ransomware and prevent you from getting reinfected.

https://www.malwarebytes.com/blog/news/2023/08/linkedin-account-take-over-campaign-leads-to-frustrated-victims?utm_source=blueshift&utm_medium=email&utm_campaign=b2c_pro_oth_*******_augustweeklynewsletter_paid_v4_*******194&utm_content=Linkedin_logo