Users who click on links are taken to ready-to-use phishing websites that collect personal information and credit card details.