BazarCall
Aliases: BazzarCall, BazaCall
- Primary motivation
- financial-gain
- Sophistication
- intermediate
- Resource level
- organization
- Actor type
- criminal
- Last IoC activity
- 2026-07-21 17:16:28
- Profile updated
- 2026-07-07 12:03:36
Targeted industries: financial-services retail-and-hospitality technology-and-telecommunications
Targeted regions: country_code:us country_code:gb
Context
BazarCall campaigns forgo malicious links or attachments in email messages in favor of phone numbers that recipients are misled into calling. It’s a technique reminiscent of vishing and tech support scams where potential victims are being cold called by the attacker, except in BazarCall’s case, targeted users must dial the number. And when they do, the users are connected with actual humans on the other end of the line, who then provide step-by-step instructions for installing malware into their devices.
Reports & references
- trellix.com — Evolution Of Bazarcall Social Engineering Tactics (report)
- Microsoft — Bazacall Phony Call Centers Lead To Exfiltration And Ransomware (report)