Hey everyone,
Today a friend received a text message from someone claiming to be from EE. The mobile number that sent the message is: +447925150926. The message reads: "[EE]:We were unable to process your latest bill. In order to avoid fees, please update your payment information via: https://ee.uk.bill315.com?ee=2I." After visting the website, you are asked to enter your email address and password, in order to log-in to your EE Account. You can enter any information into the boxes. The website then prompts you to enter strictly confidential information, including your Address and Credit Card information. After entering your private information, the fake website then redirects you to the real EE site. Futhermore, the website looks almost identical to the real EE site. I can only assume that the website owner is receiving all of the information submitted and is using it for fraudulent purposes. I was going to attach screenshots of the phishing website as well as the text message received but I can't find an option to upload.
The website is: http://ee.uk.bill315.com/account/
I have ran a check of the website and the server's IP Address is 111.90.149.20. It appears that they are using webhosting powered by Shinjiru Technology Sdn Bhd. The site is hosted in Malaysia and as writing this report the domain is 1 day old (registered on 13/02/2020) The domain registar appears to be a company called 'OpenProvider' I have forwarded my information on to 'OpenProvider' but I am yet to receive a response.