Notification Field Hijack
An attacker put their own text into a field the service copies into its emails, such as a name, note, or comment, and had it sent to you. The notification is real, and the text is theirs.
Also known as
- Named examples
-
- PayPal invoice scam