• At least two threat groups identified, one of which Netcraft can link to customs tax and postal scams carried out earlier this year.
• Up to 10,000 potential victims identified visiting this group’s phishing websites between June 19 and August 23.
• At least 2,000 form submissions, indicating how much personal data has been extracted from victims, including payment information.
• Evidence suggesting the group is running activity across Europe, including France, Germany, Italy, and Switzerland.

Rail firm TransPennine Express has since removed QR codes from all of its station car parks.