Callback Phishing Uses Fake Invoices, Images and Calendar Invites to Reach Live Scammers
Summary
Barracuda describes five blocked callback-phishing attacks using fake invoices, image-based lures, branded emails and calendar invites to prompt calls to scammers, and outlines how OCR, phone-number intelligence and other signals help detect them.
Key points
- The five attacks used fake PayPal or Geek Squad billing notices to persuade recipients to call a scammer rather than click a malicious link or open an attachment.
- Delivery methods included mass email, image-only lures, branded HTML receipts and a Google Calendar invitation.
- The messages used urgent payment or subscription claims, financial anxiety and trusted-brand impersonation to prompt a call.
- Barracuda says scammers may seek personal information, remote-access software installation, account logins or approval of fraudulent transactions.
- Barracuda describes using OCR to inspect text in images, phone-number intelligence, sender and domain analysis, impersonation checks and language analysis to detect the lures.
- The article says calendar invitations and other collaboration channels can extend these scams beyond traditional email.
Article Details
- Event Type
- Barracuda reported five detected and blocked callback-phishing attacks using fake invoices, subscription notices, images, branded HTML emails, and a calendar invitation to persuade recipients to call scammers.
- Impact
- The messages used financial urgency and impersonated trusted brands to induce phone calls to live scammers. The article says scammers may then seek personal information, persuade victims to install remote-access software or log into financial accounts, or induce fraudulent transactions; it does not report confirmed victim losses. Barracuda describes using OCR, phone-number intelligence, sender and domain analysis, and other detection methods to identify and block the cases.