Back Gbhackers

LiveChat Support Tools Abused in SaaS Phishing Scheme

Gbhackers •Mayura Kathir • March 17, 2026

A newly identified campaign shows how Software-as-a-Service (SaaS) platforms like LiveChat are being weaponized to steal sensitive data in real time. Unlike traditional phishing attacks that rely on fake login pages or static forms, this tactic uses live chat conversations to extract credentials, financial data, and personally identifiable information (PII). The campaign begins with phishing […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Exploits LiveChat for Data Theft A new phishing campaign has been identified that exploits LiveChat to steal sensitive user data by impersonating trusted brands like PayPal and Amazon. Attackers engage victims through real-time chat interactions, coercing them into providing account credentials, credit card details, and other personally identifiable information (PII). The campaign utilizes psychological tactics such as urgency and brand impersonation, with two main attack vectors: one offering a fake refund from PayPal and another prompting users about a pending order. Cofense's Phishing Defense Center discovered this scheme, highlighting the evolution of phishing tactics that make these threats harder to detect. The attackers employ poor grammar and punctuation, indicating a human operator rather than an automated system. This method represents a shift from traditional phishing techniques that typically rely on fake login pages. The campaign is ongoing, with no specific numbers on affected users reported yet. 5 sources 59

Extracted Entities

LiveChat Support Tools Abused in SaaS Phishing Scheme

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)