Free Mobile phishing emails demand €9.99 after breach
First coverage.
Polished Free Mobile phishing emails demand €9.99 and harvest card data after a 2024 breach and a €27 million CNIL fine.
Malwarebytes reports a polished phishing campaign impersonating French carrier Free Mobile after an October 2024 breach that exposed bank-account and login data. Both reports agree that CNIL fined Free Mobile €27 million in January for failures to protect customer data. On September 30, a customer received a convincing invoice-style email demanding €9.99 to avoid suspension; one report identifies the sender as knowledgegrowthcenter.help, while the other describes only a suspicious sender. The link redirected to espace-free-mobile.pro, a Cloudflare-hosted lookalike registered about a month earlier, which asked for credit card details. Similar waves used freesas.info and regularisation-free.info. Malwarebytes advises using mobile.free.fr or calling 3244 instead of email links.
- An October 2024 Free Mobile breach exposed customer bank-account and login data.
- France’s CNIL fined Free Mobile €27 million in January for failures to protect customer data.
- On September 30, a customer received a branded email demanding €9.99 to avoid service suspension.
- One report names the sender as knowledgegrowthcenter.help; the other calls the sender suspicious.
- The link redirected to Cloudflare-hosted lookalike espace-free-mobile.pro, registered about a month earlier, which requested credit card details.
- Similar lures used freesas.info and regularisation-free.info.
- Malwarebytes advises customers to use mobile.free.fr or call 3244.
- Vendors
- Free Mobile
- Victims
- Free Mobile
- Organizations
- Free MobileCNILMalwarebytesCloudflare
- Countries
- France
Coverage
oldest first · one row per article · UTCConvincing Free Mobile phishing emails appear after data breach
Scammers are sending polished Free Mobile invoice emails that phish credit card details.
Convincing Free Mobile phishing emails appear after data breach
Convincing Free Mobile phishing emails demand €9.99 and harvest card data after a 2024 breach.