Phishers Abuse LiveChat Support Tools to Steal Sensitive Data in New SaaS-Based Attack Tactic

A phishing campaign is abusing LiveChat (lc.chat) to host convincing brand-impersonation chat sessions (PayPal, Amazon) that solicit email addresses, dates of birth, home addresses, full credit card data (number, expiration, CVC), and MFA codes through multi-stage social engineering lures (refunds/order confirmations). The technique leverages legitimate SaaS pages and live-chat interactions to increase trust and evade detection; defenders are advised to monitor and block lc.chat traffic and treat unsolicited refund/order communications with caution.