LiveChat Support Tools Abused in SaaS Phishing Scheme

A Cofense-analysis style report describes a phishing campaign that weaponizes the LiveChat SaaS platform (lc.chat) to run real-time support-style conversations impersonating brands like PayPal and Amazon. Victims are lured by phishing emails to engage in chat sessions where attackers — via bots or live agents — progressively extract email addresses, login credentials, MFA codes, PII, and full credit card data, enabling account takeover, financial fraud, and identity theft; the report warns these attacks evade many automated detections and recommends user education and layered controls.