Convincing Free Mobile phishing emails appear after data breach
Scammers are sending polished Free Mobile invoice emails that phish credit card details.
Free Mobile, a major French mobile operator, was fined €27 million by CNIL in January after an October 2024 breach exposed customer bank details and logins. On September 30, a customer received a convincing invoice email from a knowledgegrowthcenter.help address demanding €9.99 to avoid suspension. The link redirected to espace-free-mobile.pro, a Cloudflare-hosted lookalike registered about a month earlier, which requested credit card data. Similar waves used freesas.info and regularisation-free.info.
- CNIL fined Free Mobile €27 million after the October 2024 customer-data breach.
- A September 30 email mimicked official templates and demanded a €9.99 payment.
- Links redirected to month-old lookalike domain espace-free-mobile.pro on Cloudflare.
- The final page requested credit card numbers, unlike cruder earlier scams.
- Vendors
- Free Mobile
- Victims
- Free Mobile
- Organizations
- Free MobileCNIL
- Countries
- France
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | espace-free-mobile.pro | 41LE/regularisation/?impaye=92a9e77d…200 This final domain, espace-free-mobile.pro , is hosted by Cloudflare and was registered just a month a |
| domain | knowledgegrowthcenter.help | om the suspicious email address freemobile-regularisation[@]knowledgegrowthcenter[.]help . It included a link that appeared to point to regularisa |
From the original article
2 min read at malwarebytes.com
Free Mobile customers received very convincing phishing emails after major data breach.
By @fr33tux · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.