Criminals exploit ebook downloads with malware, fake search pages and phishing
SCAM ALERTAmazonredteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
No specific CVE is given for the 2025 Kindle flaw, which reportedly allowed hijacking of the linked Amazon account. Infostealers disguised as PDFs targeted chat session tokens, browser data, saved passwords and crypto wallet data, and a script swapped links in archives. Defenders should only use official bookstores, verify mirror and library domains, keep devices updated, and treat reading history and account data as sensitive personal data.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Don’t use links or phone numbers in unexpected messages: contact the company yourself.
- If you have paid or shared bank details, call your bank straight away.
General advice for this kind of story
Full story timeline · 1 update
Who reported · 1 outlet
Kaspersky Daily