Threat researchTracked by EncryptLayer intelligence
Fake Calendly “Meta Careers” pages steal Facebook and Google logins
- Published by
- Malwarebytes
- Published
- 14 Oct 2026
- Indicators
- 11 verified
The report
An interview invitation becomes a trap for your Facebook and Google passwords, even with two-factor authentication turned on.
Read the full analysis: Fake Calendly “Meta Careers” pages steal Facebook and Google logins (Malwarebytes).
Indicators
Phishing
- joinconnect[.]cfd
- joinconnect[.]works
- joinhire[.]cfd
- joinhire[.]info
- joinquest[.]cfd
- joinquest[.]info
- joinquest[.]works
- jointhetalent[.]cfd
- jointhetalent[.]info
- jointhetalent[.]works
- jointheteam[.]cfd
Defanged so they cannot be clicked by mistake: replace [.] with a dot. Shared hosting and CDN addresses named in the report are left out on purpose, so blocking these does not break legitimate sites.
How this is tracked
EncryptLayer intelligence, A.R.P. Syndicate’s open threat feed, reviews each indicator against the published report before adding it (#20). This page is generated from that record and the report’s own title and summary; nothing is rewritten.