AI-Powered Phishing Poses as Puma Job Offer to Target Marketing Experts
A marketing expert targeted in a sophisticated Puma recruitment phishing scheme narrowly avoided account takeover. The incident reflects a broader 258% surge in global employment scams driven by artificial intelligence.
A veteran public relations and marketing expert recently fell victim to an elaborate phishing attempt when cybercriminals impersonated global sportswear giant Puma. The attackers sent a tailored email referencing his specific background in brand strategy, offering a senior marketing role for Puma's operations in Israel. The message directed him to a sophisticated replica of Puma's career portal hosted on a fraudulent domain.
The fraudulent landing page meticulously duplicated the official site's design, typography, and logos, incorporating a Cloudflare security verification to boost credibility. However, the trap culminated in a prompt requiring authentication via Facebook credentials under the guise of scheduling an interview. Attackers frequently target marketing professionals to hijack accounts linked to business pages and substantial advertising budgets, which can then be exploited for financial fraud and deceptive campaigns.
The victim entered his credentials before noticing suspicious details regarding the interviewer's identity. Recognizing the deception, he immediately updated his password, preventing any breach. This incident aligns with broader trends highlighted in the 2026 Global Fraud Report by Israeli behavioral biometrics firm BioCatch, which surveyed data across 370 financial institutions. The report reveals a staggering 258% annual surge in reported employment scams, marking the sharpest increase among all evaluated fraud categories.
BioCatch CEO Gadi Mazor emphasized that artificial intelligence empowers scammers to conduct targeted reconnaissance, generating flawless corporate replicas and personalized messages that bypass traditional skepticism. Security researchers from Check Point and Palo Alto Networks have previously documented similar threat actor tactics, where fraudulent recruitment processes and malicious job assignments are deployed to infiltrate corporate networks and compromise high-value assets, mirroring recent high-profile crypto heists.
