Angler Phishing: Social Media Scam Targeting Customer Support Requests

• •Angler phishing exploits public complaints on social media.
• •Attackers create fake support accounts to lure victims into private messages.
• •Users should never share sensitive information via social media DMs.

Angler phishing is a social engineering tactic where attackers impersonate customer support on social media to exploit public complaints. By monitoring platforms for users expressing issues, they quickly respond with fake accounts that mimic legitimate support. Victims, already seeking help, are often lured into private messages where they may be asked to provide sensitive information or click malicious links. This method differs from traditional phishing as it capitalizes on the victim's initiated conversation. Warning signs include recently created accounts and low follower counts. The scam's goal is to harvest credentials or install malware. Users are advised to never share personal information or click links in direct messages from accounts that appear to be official. The attack is ongoing and affects anyone using social media for customer support.