expensive. You feel like a total chump. Luckily my friends caught it just in the nick of time.
I'm neither very technical or very clear on the specifics but it went something like this: They were watching sports on internet television. Something went amiss with the signal so they called Amazon to see about getting it repaired. Unfortunately it turned out to be a spoof Amazon repair site.
They mistakenly gave the scammers their credit card number and granted them the ability to take over the computer to troubleshoot the problem. Within seconds the scammers started cashing Amazon gift cards, hit their Paypal account, caused a host of other misery.
My friends have spent three days cancelling credit cards, doing this, doing that. The scummy spear phishers gained access to their address books, their cell phones, the onslaught was almost unimaginable. Luckily they had Malware Bytes installed and were able to limit the damage.
Never give anyone your credit card number online unless absolutely necessary and you are completely sure of their authenticity. This sort of attack can happen to anybody these dungsuckers are that good. Amazing that some people have nothing better to do than to steal and try to ruin other people's lives.