Fake Amazon Order Confirmations Push Banking Trojans on Holiday Shoppers

[Mohammad.Poorya]

Phishing and malspam campaigns are in high gear for the holidays and a new campaign pretending to be an Amazon order confirmation is particularly dangerous as people shop for holiday gifts.
In a new malspam campaign discovered by email security company EdgeWave, attackers are sending email disguised as very convincing Amazon order confirmations. These fake order confirmations are being sent with subject lines that include "Your Amazon.com order", "Amazon order details", and "Your order 162-2672000-0034071 has shipped".

When you open these emails, you will be shown an order confirmation that states your item has shipped, but without any details regarding what was ordered or tracking information. It then tells the recipient to click on the Order Details button in order to see more information.

https://www.bleepingcomputer.com/news/se...-shoppers/