Understanding Telephone-Oriented Attack Delivery (TOAD) or Callback Phishing

What is TOAD (Callback Phishing)?

• 📞 Telephone-Oriented Attack Delivery (TOAD), also known as callback phishing, is a social engineering tactic where attackers send emails with invoices or payment notifications.
• 📧 These emails contain a phone number, and when the victim calls, the attacker convinces them to install remote access tools, leading to malware installation, phishing, or financial theft.
• ⚠️ Attackers often create a sense of urgency by stating that the victim will be automatically charged if they do not respond.

Why the Human Factor in Scams?

• 🧠 As general cybersecurity awareness and digital nativeness improve, attackers are shifting towards more social engineering-based techniques.
• 🤝 Directly interacting with a victim over the phone builds trust, as the victim is already invested in what they are reading and doing, making them more susceptible to believing the person on the other line.
• 📈 While call centers require more time, the return on investment can be significant, potentially leading to ransomware installation or direct access to bank accounts.

How TOAD Attacks Unfold

• 📧 Attackers impersonate recognizable brands like PayPal or Best Buy, sending emails with seemingly legitimate invoices, often with oddly specific dollar amounts.
• 📄 These emails may contain a PDF attachment with no malicious links, but rather a phone number to call for