Explanation
The objective of this phishing campaign is to gather personal data and credit card information.
The domain used in this campaign (myacl[.]lu) impersonates the legitimate acl.lu domain.
The phishing pretends that the user’s ‘Pass ACL’ is about to expire.
On the first page, the user is asked to enter personal identifiable information such as name, email address and date of birth.
On the following page their postal address and phone number are collected.
Credit card information and LuxTrust credentials are phished on the following two pages.
When clicking on ‘Retourner au site ACL’ on the final confirmation page, the user is redirected to the legitimate ACL page.
Example
