Callback Phishing Scams Are Back—This Time with Malicious PDFs
Cybercriminals are once again abusing PDFs to launch callback phishing scams, tricking victims into calling fake customer service numbers. This latest threat uses familiar tech brand names like Microsoft and Adobe to create a false sense of urgency, prompting unsuspecting users to call what they think is legitimate support. If you’ve received a suspicious PDF attachment with a phone number, it could be a phishing trap—not a real support message.
How Callback Phishing Scams Use Malicious PDFs
Callback phishing scams start with a phishing email containing a PDF attachment. These PDFs often mimic legitimate invoices, software alerts, or account notices. Inside, there's usually a phone number and a message urging you to call support about an urgent issue. Cisco Talos reports that from May to June 2025, attackers frequently impersonated companies like Microsoft, DocuSign, and Adobe. The end goal? To get you on the phone so they can pressure you into giving up personal data or installing malware on your device.
Why These PDF-Based Scams Are So Effective
These scams work because people are more likely to trust phone calls than emails. Once a victim dials the fake number, they're greeted by someone pretending to be a support agent. This person may sound professional and even reference believable technical issues or recent transactions. Then comes the dangerous part—they might ask you to install remote access tools or provide sensitive information, under the guise of "fixing" your issue. This social engineering tactic makes callback phishing scams especially dangerous.
How to Protect Yourself from Callback Phishing Scams
To avoid falling for these callback phishing scams, never call a number listed in an unexpected PDF or email. Instead, visit the official website of the company in question and use verified contact methods. Always be cautious of documents claiming there's a payment issue or urgent transaction you don't recognize. Businesses like Microsoft or Adobe never ask users to call support via a PDF attachment. If you’re ever unsure, consult your company’s IT team or use trusted cybersecurity tools to scan suspicious files.
Comment