The shift from shipping companies, who previously were the most impersonated, to social media reflects a trend of social engineering scams that are being seen across the board. LinkedIn has put measures in place to try and protect their users, but ultimately, the end users are the ones that must be vigilant. Many people have their work email address linked to their LinkedIn account, which is not a safe practice. Because of this, threat actors are able to specifically craft emails towards victims. Furthermore, phishing emails being sent to LinkedIn users will be delivered to their work email address, meaning any intrusion that could follow a link being clicked in these emails would affect their organization’s environment. Proper training should be conducted for employees on how to spot and report phishing emails.

https://www.infosecurity-magazine.com/news/linkedin-impersonated-brand/