Cybercriminals use 813 phishing sites to mimic major global brands

Security experts from NordVPN have identified a widespread cyber fraud campaign involving 813 phishing websites. These fraudulent domains impersonate the recruitment processes of over 75 major international brands, including Disney, Coca-Cola, Nike, Nvidia, Adidas, Adobe, and Booking.com.

The attackers target job seekers by initiating contact via email or social media platforms such as LinkedIn and Facebook, often posing as recruiters and using stolen names or profile pictures of real employees to build trust. Victims are directed to manipulated websites designed to mimic the scheduling service Calendly. These sites use fake Google or Facebook login windows to intercept passwords and authorization codes in real time.

Experts warn that the sophisticated nature of these sites allows them to replicate browser address bars and security icons, making the deception highly convincing.