Symantec has spotted an uptick in phishing emails that purport to come from LinkedIn support. The emails warn potential victims of “irregular activities” on their account and say a security update is required. The HTML file is actually a copy of LinkedIn’s website and login page. But the website code in the file has been modified, so if a user logs in, their account credentials are sent to the attackers. Even if the attackers gain a person’s login credentials, they could not take over an account.”]
Source: https://www.csoonline.com/article/2868889/hamfisted-phishing-attack-seeks-linkedin-logins.html