Alert: Fake Law Firm 'Infringement Emails' Triggering SilverFox Trojan Attacks
Recently, phishing attacks targeting Amazon sellers have emerged, with criminals posing as a German law firm sending 'infringement removal' emails to lure sellers into downloading a compressed file that implants the 'SilverFox' Trojan, stealing backend access and payment information.
What are the key facts?
- 1Attack method SilverFox Trojan
- 2Impersonation identity German law firm
- 3Risk point Theft of store backend and payment accounts
What happened?
Criminals are exploiting sellers' panic regarding infringement warnings by sending fake infringement notifications from unofficial email addresses. Recently, some sellers have received emails falsely claiming to be from a German law firm, stating product infringement and demanding removal, with malicious links included in the email. Clicking the link allows the Trojan program in the attachment to steal browser cookies, store passwords, and two-step verification sessions, severely affecting sellers' financial security.
What does this mean for cross-border sellers?
Sellers must verify all infringement notices through the official backend, avoid downloading attachments from unknown sources, and enhance account security protection. Top priority action: Review all store passwords and security settings this week.