There is a “theft” of credit card data in Portugal

It is nothing new that schemes using technology have been on the rise. As a general rule, the simplest schemes do the best for hackers.

The Cybercrime Office recently warned about the theft of credit card data in Portugal! Find out how it happens.

Theft of credit card data through various schemes ...
Phishing campaigns are being carried out to illegally obtain credit card data from indiscriminate victims..
As in all cases of phishing, the criminal process begins with the sending, to many recipients, of fraudulent emails or SMS messages.

According to a statement from the Cyber ​​Crimes Office, images of the Tax Authority, CTT and EDP have been abused.

In these messages, the content of the content is varied.  One of the elements that is usually present is that they are intended to be issued by a credible entity: the AT - Fiscal Authority, CTT - Correios or EDP - Energias de Portugal, among others.
E-mails generally also include the logos or corporate branding of these entities.  In addition, all encourage the recipient of the message to access, through a link, which includes the message, to an Internet page.

There have also been many messages allegedly sent by CTT - Correios, informing the recipient that they have an order pending delivery.
These messages indicate that the order will be delivered in the next few days.  They also inform that, for the respective delivery, it is necessary to pay a small customs fee (the amount indicated is always very low and usually amounts to 2 or 3 euros)

The authorities have already identified messages from the domain @ customseira.pt, as coming from the Tax Authority.
However, these messages came from another domain (the domain InMotion Hosting (https://www.inmotionhosting.com/), a service provider based in California, United States, accredited to the registrar Tucows Domains Inc., based in Canada).
In other cases, messages originating from the Russian-based domain tmweb.ru (https://vh222.timeweb.ru/) have been identified.  In both cases, they are servers of the so-called cloud, which allow any Internet user to use their services.
In the published statement, you can find several detailed fraud schemes, as well as images of the scams.