McAfee Subscription Renewal Fake Billing Scam
Initial Email Content
DEAR CUST0MER,
Y0UR SUBSCRIPTI0N WITH MCAFEE HAS BEEN RENEWED T0DAY. AM0UNT HAS BEEN DIRECTLY DEBITED
FR0M Y0UR BANK ACC0UNT AND IT WILL REFLECT IN Y0UR ACC0UNT STATEMENT WITHIN 24-48 H0URS.
IF Y0U ARE HAPPY WITH MCAFEE SERVICES. D0N'T F0RGET T0 GIVE A FEEDBACK.
PR0DUCT DESCRIPTI0N:
MCAFEE® T0TAL PR0TECTI0N
QUANTITY: 1
TENURE: 1 YEAR
INV0ICE ID: LP0/452136985
PAYMENT METH0D: DIRECT DEBIT
RENEWAL AM0UNT: $299.99
IF Y0U D0 N0T WISH T0 RENEW THE SUBSCRIPTI0N PLEASE C0NTACT 0UR CANCELLATION DEPARTMENT
IMMEDIATELY AND GET BACK Y0UR REFUND @ +1-806-531-6922
TERMS AND CONDITIONS:
THE PAYMENT HAS BEEN CLEARED AND WILL APPEAR IN THE ACC0UNTS STATEMENT WITHIN 24-48 H0URS.
Y0U ARE RECEIVING THIS N0TICE BECAUSE Y0U ARE ENR0LLED WITH MCAFEE® T0TAL PR0TECTION & Y0UR
SUBSCRIPTI0N HAS BEEN AUT0-RENEWED. H0WEVER, IF Y0U D0 N0T WISH T0 C0NTINUE WITH THE SERVICE
0R WANT A REFUND 0F THIS AM0UNT. KINDLY C0NTACT 0UR HELPLINE NUMBER +1-806-531-6922
IF Y0U PURCHASED 0R RENEWED Y0UR PR0TECTI0N DIRECTLY FR0M A MCAFEE PARTNER, Y0UR CHANGE WILL
N0T BE F0RWARDED T0 THAT PARTNER. C0NTACT THEM DIRECTLY T0 UPDATE THEIR REC0RDS.
© 2022 MCAFEE INC. ALL RIGHTS RESERVED. MCAFEE, THE MCAFEE L0G0, THE CHECKMARK L0G0, MCAFEEN,
AND THE L0CKMAN L0G0 ARE TRADEMARKS 0R REGISTERED TRADEMARKS 0F MCAFEE INC. 0R ITS AFFILIATES
IN THE UNITED STATES AND 0THER C0UNTRIES. MCAFEE INC., 60 E RI0 SALAD0 PKWY STE 1000, TEMPE,
AZ 85281 ASIA PACIFIC PTE LTD, 6, TEMASEK BLVD, #12-01, SINGAP0RE 038986, SINGAP0RE. MCAFEE LIMITED,
BALLYC00LIN BUSINESS PARK, BLANCHARDST0WN, DUBLIN 15 IRELAND EMAIL IDENTIFIER: C0LP_CHANGE_ACC_MKT_0PT_IN
Attack Screenshots
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
Attack Description
This text-based fake billing scam impersonates McAfee using a subscription renewal theme.