Talos finds 1,400 scam emails via Staples and Dell orders
Original title: Cisco Talos Uncovers 1,400 Scam Emails Sent Through Staples and Dell Order Notification Systems
Attackers put phone-support lures in order fields so authenticated retailer mail urged victims to call attacker numbers.
Cisco Talos identified roughly 1,400 scam emails sent through legitimate Staples and Dell order notification systems. Attackers placed helpline numbers and purchase claims in shipping, billing, or registration fields, so messages from orders.staples.com and order.dell.com passed DKIM and DMARC while carrying fraudulent support instructions. Samples included a fake Apple iPad order and a Dell order for Microsoft Project Standard 2024 totaling $736.09. Talos says similar abuse hit more than 25 legitimate platforms over the past year, but the findings do not establish which fraud outcomes occurred.
Unconfirmed: Talos does not establish whether calls led to payment fraud, credential theft, or remote-assistance fraud.
- Staples samples used helpline 806 283 7712 inside order fields.
- A Dell sample listed helpline 808 232 6397 and a $736.09 Project order.
- Messages passed DKIM and DMARC for the retailers' order domains.
- Earlier GitHub lure rates cited by Talos are separate from these campaigns.
- Defenders should inspect reflected fields and nested delivery-status content.
Impact: Fraudulent support numbers inside authenticated retailer emails
- 1.Verify unexpected purchase claims through retailer accounts, not phone numbers in the email.
- 2.Flag telephone numbers and support text reflected in transactional fields.
- 3.Inspect returned messages and nested MIME content rather than exempting delivery reports.
- Organizations
- Cisco Talos
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | order.dell.com | including alignment associated with orders.staples.com and order.dell.com. Forwarding through additional mail infrastructure complica |
From the original article
3 min read at gbhackers.com
Cisco Talos identified roughly 1,400 scam emails delivered through legitimate Staples and Dell order notification systems, exposing how attackers can insert fraudulent support instructions into authenticated transactional messages.
By Mayura Kathir · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.