Initial Email Content
Dear - [Recipient Name]
24/7 Support Team +1 (888) 844-2906 We would like to inform you about your recent purchase of $649.00. This charge will reflect in your account within 24 hours.
ITEMS
Product ID
Qty
Sub Total
You sent a Payment to Coinbase Global, Inc.
# z11W-2aEt-nJD1-JRL112318
0.0098
$600.00
Subtotal
Buy Exchange Rate 1 BTC =
$43,652.35
Tax
$49.00
Grand Total
$649.00
Delivery Informatin
Invoice # z11W-2aEt-nJD1-JRL112318
3/9/2022
Email Delivery [Recipient Email Address]
Payment method: Paypal Credit
This transaction may appear in your statement as PAYPAL COINBASE within 24 hours. If in case you did not make this payment, please call our 24/7 support at +1 (888) 844-2906(Toll free) to cancel. For cancellation or to make any changes or for any other issues contact the above-mentioned support number.
Attack Screenshots
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
Attack Description
This text-based fake billing scam impersonates PayPal using a cryptocurrency theme and a fake payment receipt theme.