Scammers pose as Amazon support to steal your account

This report describes an ongoing phishing campaign impersonating Amazon that uses vague "product recall" emails to lure recipients to fake login pages and harvest Amazon credentials; it explains the attacker's "spray and pray" tactic, provides examples of the lure text, and gives user-focused mitigation steps such as not clicking links, checking the Amazon Message Centre, enabling two-step verification, reporting scams, and monitoring accounts.