Luxemburger Wort "Payment Failure" Phishing Scam

A new phishing campaign is targeting subscribers of Luxemburger Wort (owned by MEDIAHUIS LUXEMBOURG) with a fake "Payment Failure" notification.

The email, which uses the subject "Notification de solde impayé" (Unpaid balance notification), claims that the payment for your subscription has failed ("Échec de paiement").

To create a sense of urgency, it threatens to suspend your access to digital content within 7 days if you do not "update your payment method." This is a tactic to rush you into clicking the malicious link.

The email looks very convincing and even includes the real contact information and footer links from Luxemburger Wort. However, the main call-to-action button is a trap.

How to spot this phishing attack:

1. The Malicious Link Domain: This is the most dangerous red flag. When you hover your mouse over the "Mettre à jour mon mode de paiement" (Update my payment method) button, the link points to luxembourgwort.com. This is a fake domain. The official website is wort.lu.

2. Sender Email Address: The sender name "MEDIAHUIS LUXEMBOURG" is correct, but the email address is not. The email comes from @scarlet.be (a Belgian ISP), not an official @wort.lu or @mediahuis.lu domain.

3. Threat of Account Suspension: The 7-day warning is a classic social engineering tactic to create panic. Legitimate companies will not threaten you in this way via an urgent, unsolicited email.

If you receive this email, do not click any links. Delete it immediately. If you are a subscriber and concerned about your account, always log in by typing wort.lu directly into your browser to check your payment status securely.