This campaign involves threat actors sending phishing and smishing messages that impersonate postal services to exploit recent customs charges on items posted from outside the EU. The attackers use fraudulent domains and IP addresses to deceive recipients into providing sensitive payment and personal information. The campaign is currently observed targeting Irish users and is linked to the introduction of new customs taxes, which provides a plausible pretext for the scam messages. No direct software vulnerability or exploit is involved; rather, this is a social engineering campaign leveraging current events.

The impact involves potential financial fraud and identity theft resulting from victims disclosing payment card details and personal information to the attackers. This can lead to unauthorized transactions, financial loss, and privacy breaches for affected individuals. There is no indication of exploitation of software vulnerabilities or system compromise beyond the phishing and smishing attempts.

There is no software patch or fix applicable as this is a social engineering campaign. Users should be advised to verify the authenticity of any customs or postal service communications independently, avoid clicking on links or providing payment details in unsolicited messages, and report suspicious communications to relevant authorities. Organizations can consider awareness campaigns to educate users about this specific phishing theme. Blocking the identified malicious domains and IP addresses at network boundaries may also reduce exposure.