Find notable cyber news and cases, enriched with sources, timelines, and signals.

Tesla, Red Bull, and Ferrari brand-impersonation career phishing campaign

Campaign
First reported
Last updated
Happening score
H score 29
1 unique sources, 1 articles

Summary

Hide ▲

A career-themed phishing campaign has been using Tesla, Red Bull, and Ferrari job lures to steal credentials and PII from social media and marketing professionals. The operation has been active since February and relies on brand spoofing to slip past filters and user scrutiny. Victims are sent through fake application flows that lead to Glassdoor-style and Facebook login pages. The shift to collecting resumes and login data increases the value of the stolen information for future abuse.

Related Happenings

Ghost Stadium FIFA World Cup fraud campaign

Campaign
H score41 First: 27.05.2026 14:28 Last: 27.05.2026 14:28 Sources 1

About this happening: A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is targeting **2026 FIFA World Cup** fans with cloned **fifa.com** pages, fake ticket and hospitality offers, and...

AccountDumpling Google AppSheet Facebook phishing campaign

Campaign
H score31 First: 01.05.2026 21:09 Last: 01.05.2026 21:09 Sources 1

About this happening: A **Vietnamese-linked** operation dubbed **AccountDumpling** is using **Google AppSheet** as a phishing relay to steal **Facebook** credentials, enabling account takeover at scale...

Rising social-media scam losses among U.S. consumers in 2025

Trend
H score72 First: 27.04.2026 19:27 Last: 27.04.2026 19:27 Sources 1

About this happening: **Social media scams** drove a sharp rise in consumer losses in **2025**, with reported losses reaching **$2.1 billion** and nearly **30%** of scam-loss reports starting on these...

Bitpanda impersonation phishing campaign using fake MFA flow

Campaign
H score37 First: 24.02.2026 18:05 Last: 24.02.2026 18:05 Sources 1

About this happening: A **phishing campaign** impersonating **Bitpanda** is stealing **credentials** and **personal data** from cryptocurrency brokerage users, raising account-takeover risk. The operat...

Jinkusu's Starkiller phishing-as-a-service ecosystem commoditizes account takeover

Threat Actor Meta
H score37 First: 20.02.2026 22:00 Last: 20.02.2026 22:00 Sources 1

About this happening: A new phishing-as-a-service operation tied to **Jinkusu** is proxying real login pages through attacker infrastructure, making **MFA bypass** and account takeover easier for low-s...

Timeline

  1. 08.10.2025 16:48 2 articles · 8mo ago

    Cofense discloses Tesla, Red Bull, and Ferrari job-lure phishing campaign

    Initial Disclosure

    Cofense tracks a job-themed spear-phishing campaign that impersonates Tesla, Red Bull, and Ferrari to target social media and marketing professionals with fake recruitment offers. The lure chain uses brand logos, a CAPTCHA page, counterfeit Glassdoor pages, and spoofed Facebook login flows to collect email credentials, Facebook login information, resumes, and other PII for future social-engineering abuse.

    Show sources