An Amazon Prime Spoofing Campaign is Using Malicious PDF to Steal Credit Card Information
Threat intelligence experts at Unit 42 discovered the phishing campaign in January 2025. The attack starts with an email about the target's expiring Amazon Prime membership. Similar to the Amazon Prime membership phishing campaigns that ran rampant from 2022 to 2024, this tells the customer that there was an issue with the credit card on file and that failure to update the payment method will cause suspension of Prime benefits.