Back Cybersecuritynews

Phishers Abuse LiveChat Support Tools to Steal Sensitive Data in New SaaS

Cybersecuritynews •Tushar Subhra Dutta • March 17, 2026

A newly identified phishing campaign is turning legitimate customer service software into a weapon for stealing sensitive user data. Attackers have been found abusing LiveChat, a widely used Software-as-a-Service (SaaS) platform that businesses rely on for real-time customer support, to carry out convincing phishing operations against unsuspecting victims. The campaign marks a clear shift from […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Exploits LiveChat for Data Theft A new phishing campaign has been identified that exploits LiveChat to steal sensitive user data by impersonating trusted brands like PayPal and Amazon. Attackers engage victims through real-time chat interactions, coercing them into providing account credentials, credit card details, and other personally identifiable information (PII). The campaign utilizes psychological tactics such as urgency and brand impersonation, with two main attack vectors: one offering a fake refund from PayPal and another prompting users about a pending order. Cofense's Phishing Defense Center discovered this scheme, highlighting the evolution of phishing tactics that make these threats harder to detect. The attackers employ poor grammar and punctuation, indicating a human operator rather than an automated system. This method represents a shift from traditional phishing techniques that typically rely on fake login pages. The campaign is ongoing, with no specific numbers on affected users reported yet. 5 sources 59

Extracted Entities

Phishers Abuse LiveChat Support Tools to Steal Sensitive Data in New SaaS

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)