New Phishing Scam Uses LiveChat to Pose as Amazon and PayPal in Real Time
2026-03-16T20:51:54Z•290ea7171bee779198f15d66bb349a5c5c4207e4a3fba6c24999d3046e7a3ab6
amazonapparmorcompanies-housecontainer-escapecrackarmorcredit-card-frauddata-breachdata-exposureinterpollinuxlivechatmalicious-ipsmfa-bypasspaypalphishingprocess-hollowingratremcosroot-escalation','wordpress','sql-injection','ally-plugin','vulnshinyhunterstakedownteluswebfilingwinrarxworm
What happened
Multiple high-impact incidents reported: Cofense warns of a LiveChat phishing campaign impersonating Amazon and PayPal agents to steal credit card details and MFA codes in real time. A Companies House WebFiling flaw exposed director details and allowed record modification before the service was taken offline and restored. Malware activity includes new XWorm 7.1 and Remcos RAT campaigns that abuse trusted Windows tools (including exploitation of a WinRAR flaw and use of process-hollowing) to evade detection. ShinyHunters claims a massive (up to 1 PB) data theft from Telus Digital. INTERPOL’s Sy
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 290ea7171bee779198f15d66bb349a5c5c4207e4a3fba6c24999d3046e7a3ab6
- Enrichment time
- 2026-03-16T20:51:54Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.