Call Me Maybe? The Rise of Callback Phishing Emails · Blog · Sublime Security

Callback phishing is a social-engineering scam that tricks recipients into calling attacker-controlled numbers to enable fraud, malware/ransomware delivery, or financial theft. The report explains why detection is difficult (phone numbers as the payload, obfuscation in text/images, frequent use of freemail and VoIP), and describes detection approaches including text-based rules, OCR+NLU for image content, and logo detection via computer vision, with links to open-source detection rules and a short case study.