Those who are fooled could then find themselves seriously out of pocket with the online thieves using these details to steal money from bank accounts and credit cards.
Speaking about the scam, Avanan said: “As holiday shopping begins earlier this year due to supply chain issues, many are beginning to stock up, especially from Amazon. For hackers, it’s an opportunity to spoof purchase notifications in order to obtain financial information. This attack works by using legitimate Amazon links, forcing the end-user to make a phone call instead to cancel any order.
“In this email, the hackers convincingly spoof a typical Amazon order confirmation notice. All links go directly to Amazon’s site. This means that even the most trained user will click on it. What would set off alarm bells is the actual email address, which comes from a Gmail address. “
Leave a Reply