There’s a brand new phishing campaign on the run in Spain that poses as the Spanish Tax Agency, Agencia Tributaria.
The phishing attempt starts out via a fraudulent SMS that notifies victims of a supposed reimbursement that they qualify for. According to the SMS, all they need to do to receive the reimbursement is to fill out a form on the agency’s website.
When the user clicks on the link, it redirects them to a page posing as the Tax Agency and asks for their credit card details, including the CCV and PIN codes.
Finally, it asks victims to enter a code that they’re supposed to receive via SMS (which the victim never gets), or alternatively, to open their mobile banking app where they’re supposed to get a notification of the reimbursement.
