Security News > 2022 > May > New phishing technique lures users with fake chatbot

As is often the case, the initial delivery channel for the phishing scam is email.

Once the user has clicked, they are led to a chatbot-like page, which is where the real phishing occurs.

The page shown to the user at this point is seen as a real chatbot page, but it is not.

Figure D. The user is then asked for their email address, password and delivery address.

Figure E. Now that the user has validated a captcha, provided delivery information and possibly provided their email credentials, the final stage of the attack asks the victim to provide their credit card information to pay for the package delivery.

Email protection solutions should also be deployed in order to detect phishing campaigns and suspicious emails.

News URL

https://www.techrepublic.com/article/new-phishing-technique-chatbot/