LiveChat Hijacked to Steal Customer Data

A novel cyberattack sees livechat hijacked by phishers seeking to extract personal data through deceptive means. Assailants exploit the SaaS platform LiveChat, manipulating its customer service tools to create convincing phishing schemes. Victims, targeted by phishing emails mimicking services like PayPal and Amazon, are lured into engaging with what they believe are legitimate live support agents.

Once in the chat, unsuspecting users are drawn into disclosing sensitive information under the guise of routine identity checks. The attack’s sophistication blurs the line between a genuine and fraudulent customer service session. The phishing emails employ tactics like offering refunds or confirming orders, with links that redirect users to LiveChat’s domain, lc[.]chat.

Security experts urge vigilance against emails offering refunds or orders needing confirmation. Monitoring traffic to lc[.]chat and blocking malicious URLs can mitigate risks. For further details, read the full article at the link below.

Phishers Abuse LiveChat Support Tools to Steal Sensitive Data in New SaaS-Based Attack Tactic