LUCAMEA UK-based reseller of Shelly smart home devices has warned customers that malware on its website was skimming payment card details. At least one customer reported fraudulent charges on their card before the company had even sent out its notification.
What this means for your business
If your staff or anyone in your business has bought from this retailer recently, check your card statements now and report anything suspicious to your bank straight away. This is a classic web-skimming attack, where malicious code sits quietly on a checkout page and copies card details as they're typed in. It's a good reminder that even legitimate UK retailers can be compromised without knowing it, so using a virtual card or a payment service like PayPal for online purchases adds a useful layer of protection.