2023-04-16 12:23:04
In just minutes, organizations can use Verified ID to create personalized digital employee IDs that reflect their brand and business needs. On LinkedIn, members will see an option to verify where they work on their profile. With just a few clicks on their phone, members can get their digital employee ID from their organization and choose to share it on LinkedIn. After submitting the credential, a workplace verification will be displayed on their profile.
Verified ID is built on open standards for decentralized identity, which operates on a “triangle of trust” model involving three parties: an issuer, a holder, and a verifier. For example, an organization can act as an issuer by cryptographically signing a digital credential and issuing it to an employee in the form of a digital ID card. As the card holder, the employee can choose to share it on apps and websites, such as LinkedIn. The verifier can then cryptographically authenticate that the employee’s digital ID is genuine and was issued by the employee’s declared workplace. This approach represents a safer, more convenient, and more reliable way to verify large-scale digital information.
I would add just one sentence: LinkedIn is used as a phishing vector capable of attracting more easily than with traditional phishing emails. We have found that the platform has been misused by several prominent malicious actors in their phishing and cyber espionage campaigns, including the North Korean group Lazarus. Adding a photo, a course and some shared connections can very easily be used to manipulate a target. Until now, there was no digital equivalent to the physical identity card, which unfortunately made the game of cybercriminals.
Digital interaction often contributes to the art of manipulation in the hands of sophisticated actors. This new verification tool will undoubtedly reduce the current threat and boost user confidence. As with all new tools intended to limit scams, bad actors will inevitably try to circumvent it. Verification of identity and employment elements alone cannot completely stop attackers who attempt to create fictitious identities and fake companies to “verify” fake jobs. However, the general acceptance of job verification on LinkedIn would make it harder for malicious actors to impersonate legitimate accounts and construct convincing fake personas.
1681684995
#LinkedIn #contact #work #claim
