Before we start go to your LinkedIn account now and check:
- You are using a complex password that you do not use anywhere else.
- That MFA is switched on.
- Ensure you have at least two alternate emails set up.
- Having the app installed on your phone can act as an extra security step if a hacker tries to login.
Threat actors are hacking into and taking over LinkedIn accounts by apparently using the simplest of hacks – brute-forcing or using leaked credentials.
LinkedIn and Microsoft are not helping the situation by dragging their feet and being “out of contact” when it comes to restoring ownership.
LinkedIn accounts hacked in widespread hijacking campaign – BleepingComputer
Your take away – read the list above and remember, what threat actors do to your LinkedIn account today, tomorrow they will try on your WordPress accounts, Amazon accounts, etc., etc., etc..
Read that list and apply it to all your accounts.
Clive Catton MSc (Cyber Security) – by-line and other articles
