Fake CMCM member-card renewal emails lead to my.cmcm-membre.com, which seeks card data and LuxTrust logins

What happened

MalwareTips reports a CMCM card renewal email scam claiming a member card is about to expire and directing readers to a copied renewal site. Citing GOVCERT, it names a malicious page at my.cmcm-membre.com that shows a EUR 1.53 procedure cost, then seeks personal information, payment-card details and LuxTrust credentials. CMCM, the genuine Luxembourg organization being impersonated, says its member cards don't expire and it doesn't request payment for them.

How the scam works

The email claims a member card is about to expire and asks the reader to renew it through a button. In the example MalwareTips published, the sender address is an unrelated domain (oya-ly.com) that only uses CMCM's name in the display name. The renewal site shows a tiny EUR 1.53 'procedure cost', then asks for personal details, card data and LuxTrust credentials.

Luxembourg's government computer emergency response team, GOVCERT.LU, has documented a series of phishing campaigns that copy trusted local services and end by asking for LuxTrust credentials. LuxTrust is the digital identity used to sign in to Luxembourg banks and government services, so those details let criminals log in as the victim, approve payments and open further fraud. Small fees, such as a few euros for a 'conversion' or 'procedure', make the request seem routine and also capture full card details.

CMCM is impersonated and is not involved. It says its member cards don't expire and it doesn't ask for payment for them. If you entered card details, block the card. If you entered LuxTrust credentials, contact LuxTrust.

Source

MalwareTips, "CMCM Card Renewal Email Scam" (published 25 October 2026).