Explanation
The objective of this phishing campaign is to gather personal data and credit card information.
The domain used in this campaign mimics the appearance of Centre commun de la sécurité sociale (CCSS) and claims that the victim’s social security card has expired.
Once it has been verified that a user is indeed human, collection of personal details ensues.
Under the pretense of delivering the new card to the user, their address and phone number are subsequently requested.
Providing this information leads to the final step in which payment details are solicited.
This stage not only gathers credit card information but also LuxTrust credentials.
Upon completion of the process, a confirmation message is displayed as a measure to prevent triggering suspicion from the user.
All the described steps take place on pages under the malicious domain ‘cns-ordermycard[.]com’ .
The following similarly named phishing domain has been registered at around the same timeframe and might become active in the following days:
‘cnss-ordermycard[.]com’
Example
