Security Awareness – New Phishing Campaigns Impersonate Apple and Amazon Invoices for High-Value Items

Amid greater adoption of anti-phishing software and increased awareness of phishing scams, threat actors are increasingly incorporating low-tech phone scams to spoof unknowing victims. A recent campaign involves emailing fake Amazon and Apple invoices informing recipients they have just purchased a very expensive item. The recipients are prompted to call a number in the email if they wish to get refund – a ploy that has a great deal of success as victims hastily want to stop/prevent a high-dollar charge. Once recipients call the number in the email, the threat actor pretends to be an Apple or Amazon employee in an attempt to trick victims into providing personal and credit card information. The security firm Vade has been tracking this scam since October 2021 and observed a surge at the start of the holiday season these past few weeks. Members are encouraged to remind users to stop, think, verify, and report all urgent sounding messages (email or text) eliciting an immediate reaction. Read more at Cybernews.