Webroot Email Scam and Phishing

The Webroot email scam is a phishing campaign featuring fake invoices for security services you did not order, aiming to steal credit card details via a fake support number. These emails use panic-inducing language, often originating from non-Webroot addresses, and may include malicious attachments.

Key Details of the Scam

The Hook: A "Subscription Activated" or "Order Confirmed" email indicates a high-cost, automatic charge for Webroot antivirus or "Premium PC Security".
The Goal: To get you to call a fake support number to "cancel" the charge, at which point scammers steal your personal/financial information.
Red Flags:
- Emails sent from generic addresses (like Gmail) rather than legitimate Webroot domains.
- Poor spelling, grammar, and urgent language.
- Invoices that do not list specific products.

How to Protect Yourself

Do Not Call: Never call the phone number listed in the suspicious email.
Verify Independently: Contact Webroot directly through their official website if you are concerned.
Check Accounts: Review your bank or credit card statements directly, not via links in the email.
Report: Report the email to the FTC in the US, or equivalent authorities in your country, and notify Webroot Customer Support.

If you already interacted with them, change your passwords, scan your computer for malware, and contact your bank to freeze your card.