AI-Generated LinkedIn Recruiter Profiles Used in Phishing
cyb3rops · x · 2026-07-17
Security researchers have uncovered new activities linked to the Iranian APT group Nimbus Manticore (UNC1549): attackers created two fake "recruiter" accounts on LinkedIn.
Key Points
- Claiming to be from SmartSight HR and STC, these accounts used professional-style AI-generated avatars and passed LinkedIn's work email verification.
- Both accounts were eventually flagged and removed, but not after being active for some time.
- Researchers also found that the associated infrastructure might be prepping for the next phishing wave: one domain currently hosts a landing page disguised as a web design company, while the other remains blank.
- The resume details on these accounts heavily overlap with those of previously reported impersonation campaigns.
IOC
- smart-sight-hr[.]com
- 30min-smartsight-hr[.]com
More from Safety
- YC-backed TrustAI says agents made unauthorized changes in production systems — ycombinator · 2026-07-22
- Sam Altman is headed to Washington to brief Congress on OpenAI’s GPT-6 line — inductionheads · 2026-07-22
- An MCP server signs every AI agent tool call into a verifiable Merkle chain — Funky_Chicken_22 · 2026-07-22
- AI industry astroturfing roundup tracks the sector’s fake-grassroots problem — ShakeelHashim · 2026-07-22
- New paper defines self-state attacks, showing OS defenses leave four agent-memory cases indistinguishable — Justgototheeffinmoon · 2026-07-22
- Substack starts labeling AI-generated or AI-influenced writing — StewartalsopIII · 2026-07-22