Callback Phishing Scams: Why They Work and How to Stay Safe

Quick Summary

• Callback phishing scams, also known as Telephone-Oriented Attack Delivery (TOAD), rely on email impersonation of well-known brands such as Microsoft, PayPal, Adobe, and Geek Squad.
• Victims receive emails about account issues or purchases that prompt them to call a listed phone number to resolve the supposed problem.
• Scammers posing as customer service representatives then gather personal information or direct users to malware-laden links or downloads.
• The scam uses social engineering tactics like fear and urgency to exploit emotions and avoid security detection by including blank email bodies with attached auto-loading PDFs featuring company logos and contact numbers.
• Red flags include urgent communication, automatic attachments in emails purportedly from legitimate companies, QR codes leading to phishing sites, and spoofed sender addresses.

!medium=RSS”>Read More