• Refund scam impersonates Avast to harvest credit card details A fraudulent website dressed in Avast’s brand is tricking French-speaking users into handing over their full credit card details-card number, expiry date, and three-digit security code-under the cover story of processing a €499.99 refund that was never owed to them. • The operation combines live chat “support,” a hardcoded alarming transaction amount, and a convincing replica of Avast’s visual identity to create urgency and harvest payment data at scale. • “You were charged €499.99 today” The phishing page opens with what appears to be a legitimate Avast web portal. • The Avast logo is loaded directly from Avast’s own content delivery network-a deliberate touch that ensures the orange-and-white shield renders perfectly and passes a casual visual check. • The page header offers links to “Home,” “My Account,” and “Help,” all styled to match Avast’s real interface. • Below the header, a warning box in Avast’s signature orange catches the eye: cancellation requests must be filed within 72 hours, it says.
Article Summaries:
- A phishing site masquerading as Avast is targeting French‑speaking users with a fake €499.99 refund claim. The fraudulent page uses Avast’s logo from the company’s CDN and mimics its interface, including a live‑chat “support” feature. Victims are shown a hardcoded €499.99 debit dated to the current day, then asked to submit personal details and full credit‑card information under the pretext of processing a refund. The form validates card numbers with the Luhn algorithm before sending data to a backend script. The operation aims to harvest payment details at scale while exploiting Avast’s brand trust.
- A fraudulent website dressed in Avast’s brand is tricking French-speaking users into handing over their full credit card details-card number, expiry date, and three-digit security code-under the cover story of processing a €499.99 refund that was never owed to them. The operation combines live chat “support,” a hardcoded alarming transaction amount, and a convincing replica of Avast’s visual identity to create urgency and harvest payment data at scale. “You were charged €499.99 today” The phishing page opens with what appears to be a legitimate Avast web portal. The Avast logo is loaded direct
Sources:
- https://www.malwarebytes.com/blog/threat-intel/2026/02/refund-scam-impersonates-avast-to-harvest-credit-card-details (Latest source article published: 2026-02-24 08:28 UTC)