LinkedIn has been the focus of online scams and phishing attacks for a number of years. Bad guys exploit LinkedIn’s wealth of data it offers on employees at corporations. LinkedIn’s InMail feature has been used to initiate all manner of scams, but we had never seen InMail used to launch a standard credentials phish targeted at bank account holders. The next day we encountered the same phish again — but this time delivered to an email account outside an actual Wells Fargo account holder. The phish is a social engineering-for-the-word for the word “social engineering””]
Source: https://blog.knowbe4.com/yes-that-email-is-really-from-linkedin.-and-yes-its-really-malicious