Linktree is a landing page service where businesses and individuals can list multiple links on one page. This service is often used on social media platforms like Instagram and TikTok for quick and easy access to various web pages. Common links you may see are blog pages, Amazon storefronts, Etsy shops, etc. However, cybercriminals can also use Linktree to host malicious links to try to steal your personal information.
(Image source: Linktree)
You'll receive a notification that a file has been shared with you by someone you know, but it’s actually a cybercriminal in disguise. This notification prompts you to open the file through a link. If you click the link, you’ll be redirected to a legitimate Linktree page that contains a fake Microsoft 365 link. This link will take you to a login page that prompts you to enter your Microsoft credentials. Once you share this information, cybercriminals can use it for their malicious purposes.
Follow the tips below to stay safe from similar scams:
Source: KnowBe4