Fake LinkedIn Invitation Emails Point to Malware

The emails are not from LinkedIn. Links in the bogus emails open websites that contain malware.

Malicious emails purporting to be from popular business orientated online network LinkedIn are currently being distributed. The emails, which look like official LinkedIn messages, claim that pending invitations are awaiting the recipient’s response and advise him or her to visit the LinkedIn email inbox to view the invitations.

However, the messages are not from LinkedIn and links in the messages do not lead to the LinkedIn website. In fact, all links in the bogus messages point to a website that contains malicious software. Clicking the links opens a page that tries to trick the visitor into downloading and installing the malicious software. The version of the message that I examined pointed to a site that contained a rogue anti-virus program. Alternative versions of the scam messages may open sites that contain other types of malware.

The bogus emails have been designed to resemble genuine LinkedIn messages. Links in the messages have been disguised so that they appear to point to the real LinkedIn website. Internet criminals regularly use such ruses to target users of popular social networks such as LinkedIn, Facebook and Twitter.

Be cautious of following links in any emails that purport to be official notifications from such networks. Always check that links in such emails are genuine. Ensure that links in such messages only direct you back to pages on the network’s own website.