Social Security Phishing Scam
Summary
The initial stage of the scam campaign consists of the dissemination of lure emails presented as if being sent by the U.S. Social Security Administration. The subject lines of the emails may imply that the users SSN has been connected to suspicious activity or that it will soon be discarded, discontinued, suspended, etc. When opened, the document will feature prominently the logo of the Social Security Administration and a specific Case Number. The text and scenario presented in the PDF file may vary but it will always encourage the unsuspecting recipients to contact a provided phone number, described as belonging to the agency. Users could be asked to provide their bank information or pay a bogus fee in the form of gift cards or a specific cryptocurrency.