Phishing Scams Target Free Mobile Customers After Data Breach
Free Mobile, one of France’s leading cellular providers, faced a €27 million fine from the CNIL, France’s data protection authority, in January due to inadequate customer data protection. An October 2024 breach resulted in unauthorized access to sensitive customer records, including bank account details and login information. In the aftermath, numerous poorly crafted scam campaigns targeting Free Mobile customers emerged.
Recently, however, a more sophisticated phishing email has been identified, closely resembling the official Free Mobile website and email templates. One employee, a Free Mobile customer, received a phishing email on September 30, which utilized the company's logo and design but originated from a suspicious email address. The message claimed that an invoice of €9.99 needed to be paid to prevent service suspension, directing users to a link that appeared to lead to the official site.
The link, however, redirected to a domain that was registered just a month prior and hosted by Cloudflare. This phishing page was designed to look authentic, asking users for credit card details, which distinguishes it from many previous scams that were less convincing.
Intelligence Reviewed
Earlier campaigns had employed less credible redirection chains, but the recent phishing attempts have shown a marked improvement in authenticity, utilizing domains that appear legitimate. Malwarebytes has noted these developments and emphasizes the importance of vigilance against unexpected messages regarding accounts and invoices.
To enhance security, users are advised to treat such communications with caution and consider using protective measures like Malwarebytes Browser Guard, which automatically blocks phishing pages and malicious sites. This incident highlights the ongoing risks associated with data breaches and the evolving tactics of cybercriminals targeting vulnerable customers.
