{"id":40970,"date":"2021-05-20T15:39:25","date_gmt":"2021-05-20T15:39:25","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/32304\/Fraudsters-Employ-Amazon-Vishing-Attacks-In-Fake-Order-Scams.html"},"modified":"2021-05-20T15:39:25","modified_gmt":"2021-05-20T15:39:25","slug":"fraudsters-employ-amazon-vishing-attacks-in-fake-order-scams","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/fraudsters-employ-amazon-vishing-attacks-in-fake-order-scams\/","title":{"rendered":"Fraudsters Employ Amazon Vishing Attacks In Fake Order Scams"},"content":{"rendered":"

Researchers have highlighted tactics used by fraudsters today in voice-based phishing campaigns.  <\/p>\n

Phishing attempts involve fraudulent messages sent over email, social media networks, SMS, and other text-based platforms. They may appear to be from your bank, popular online services — such as PayPal or Amazon — or they may attempt to lure in victims with promises of tax rebates and competition prizes. <\/p>\n

These messages often contain malicious attachments designed to deploy malware, or they may try to direct victims to fake websites.  <\/p>\n

So-called “vishing” is a subset of phishing techniques that combines ‘voice’ and ‘phishing’. Victims may be cold-called or emails could contain phone numbers, voice notes, and messages — but the overall goal is the same: to swipe your personal data.  <\/p>\n

Scam artists can employ “spray and pray” techniques in campaigns and blast out thousands of emails in one go, and now, voice over internet protocol (VoIP) technology has allowed fraudsters to do the same, all while spoofing their caller IDs and identities.  <\/p>\n

In separate case studies published by Armorblox on Thursday<\/a>, the team highlighted two Amazon vishing attacks intent on stealing customer credit card details — and how the use of voice messages can bypass existing spam filters.  <\/p>\n

The first example vishing attempt, tracked to roughly 9,000 email inboxes, was sent from a Gmail account and contained the subject line: “Invoice:ID,” followed by an invoice number and content containing color markers used by Amazon.  <\/p>\n

<\/section>\n

This email says that an order for a television and gaming console had been placed — a purchase worth hundreds of dollars — and urges the recipient to contact them using a phone number if there are any errors.  <\/p>\n

\"screenshot-2021-05-17-at-08-59-48.png\"<\/span>