Apple and Amazon Users Targeted by New Phishing Scam

A new phishing scam is targeting users of both Apple and Amazon, employing deceptive pop-up notifications to trick individuals into divulging sensitive personal information or financial details. This scheme, recently highlighted by cybersecurity firm Malwarebytes, leverages compromised websites, malicious browser redirects, or deceptive advertisements to present users with a pop-up that mimics the design language of either Apple or Amazon. The fraudulent notification warns of a suspicious, pre-authorized payment of $149.99 detected on the user's account. It then instructs the recipient to call a displayed phone number, claiming to be an Apple or Amazon representative, to resolve the supposed unauthorized charge and protect their account.

The scam's effectiveness relies on its sophisticated design and psychological manipulation. The pop-ups are crafted to closely resemble legitimate notifications from Apple or Amazon, incorporating design elements such as rounded corners and blue buttons, particularly in the Apple-themed decoys. These pop-ups often feature a transparent background, revealing what appears to be the genuine Apple or Amazon website behind them. However, this underlying display is typically a static screenshot or a cloned version of the legitimate site, designed to enhance the illusion of authenticity. The primary goal is to create a sense of urgency and alarm, prompting users to act without critical evaluation.

When a user calls the provided phone number, they are connected to scammers posing as customer support agents. These individuals then attempt to extract personal information, such as login credentials, credit card numbers, or social security numbers, under the guise of verifying the account or reversing the fraudulent charge. In some instances, the scammers may also pressure victims into making a payment to resolve the issue, further exacerbating the financial loss. The scam preys on the common concern users have about account security and unauthorized transactions, making them more susceptible to the deceptive tactics employed.

To protect themselves, users are advised to be highly skeptical of unsolicited pop-up notifications, especially those demanding immediate action or personal information. Legitimate companies like Apple and Amazon typically do not request sensitive data through pop-ups or via phone numbers provided in such alerts. Instead, users should independently navigate to the official websites of Apple or Amazon or use their official applications to check for any account alerts or suspicious activity. Furthermore, maintaining up-to-date antivirus software and practicing safe browsing habits, such as avoiding suspicious links and websites, are crucial defenses against such phishing attempts. The $149.99 figure is a common tactic used in such scams to create a believable, yet alarming, financial pretext for the fraudulent interaction.