A new attack is using Google Drawings and a WhatsApp link in order to access Amazon accounts. This phishing exploit aims to acquire user login details and payment card information. First, a phishing email tries to get a user to click a fake link which appears to be from Amazon. The victim is then shown an Amazon account verification link. This link is actually a graphic from Google Drawings, and if clicked the user will be sent to a seemingly genuine Amazon account login page. The login page requests further user information, eventually asking for full payment card details. Even if the victim becomes suspicious at this point, the actor will still have access to all data the user has given throughout the different verification steps. 

Read more: https://www.forbes.com/sites/daveywinder/2024/08/08/hackers-use-google-drawings-and-whatsapp-in-new-3-step-amazon-attack/?ss=cybersecurity