CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

Cybersecurity researchers have uncovered a large-scale, global recruitment-themed phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser (BitB) windows to steal Google and Facebook credentials and, in more advanced cases, relay multi-factor authentication (MFA) prompts in real time. CTM360, which detailed the activity in a new report titled RecruitTrap, said it

The article reports on CTM360's discovery of a large-scale, global recruitment-themed phishing campaign using fake interview scheduling pages and Browser-in-the-Browser (BitB) credential traps to steal Google and Facebook credentials, in some cases relaying MFA prompts in real time. These are classic social engineering and web phishing techniques, not AI-driven attacks, but they directly threaten accounts and data that may be used to access or administer AI systems and SaaS AI integrations. From RealGround's perspective, organizations should treat credential phishing that targets cloud identity (e.g., Google, Facebook SSO) as an indirect AI security risk, since compromised identities can be abused to access AI-enabled workflows and data. An AI Security Readiness Assessment can help map where AI systems depend on federated identities, evaluate MFA and phishing-resistant controls, and ensure incident response plans cover AI-related access and data exposure paths.