The actual linked URL is: http://62.48.216.114/for.html
From: Wachovia Bank <futere@mare.com>
Date: 2010/1/28
Subject: Protecting your account !
Dear Valued Customer,
We're committed to protecting you when you bank with us. Our industry-standard levels of security ensure that you can always access your Wachovia Bank accounts online with confidence.
To ensure you are always protected, we are introducing a new programme of security initiatives called BankSecureTM. Over the next few months, you'll see a number of initiatives that we'll put in place to make sure you stay secure and to help you protect your Internet Banking information. We're here to help you stay safe while banking online. For more information and advice on security log on below.
https://onlineservices.wachovia.com/auth/AuthService?
Thank you for banking with us.
Alert on Phishing and Vishing attacks targeting Internet banking users
0 Comments Published by Ebisu on Jan 19, 2010 at 9:42 AM.Recently the Bank of India has also released a Security Alert on Phishing and Vishing* attacks alerting the customers about the fraudulent e-mails (also known as Phishing e-mails) going out to customers of various banks luring them to update sensitive account information like their, User IDs, Passwords, even transaction Passwords, etc., by clicking on an e-mail link or by visiting a website. The bank also alerts that the same sensitive information may be also asked via telephone call (globally known as Vishing attack), pretending to be genuine officer from Bank Of India.
The bank urges the customers not to respond to such Phished emails and fraudulent telephone calls.
The alert also provides contact details - including e-mail and phone numbers - to which Phishing and Vishing attacks an be reported.
>>>> See the Security Alert at: http://www.bankofindia.com/mobilebanking.aspx
>>>> * Vishing : or voice phishing is the criminal practice of using social engineering over the telephone system, most often using features facilitated by Voice over IP (VoIP), to gain access to private personal and financial information from the public for the purpose of financial reward. The term is a combination of "voice" and phishing.
Labels: PHISHING
[PHISHING] Security notification regarding your Internet Banking
0 Comments Published by Ebisu on at 8:33 AM.>>>>>>> The text shown as a link to the official website of the bank (http://www.bankofindia.com/web/internetbank.aspx) is actually linked to a FAKE WEB PAGE at http://starconnectcbs-bankofindia.limewebs.com/web/internetbank.php
It seems that now the fake page has been removed from the server, and is replaced with a new page with the following alert.
"This site has been deactivated."
Probably this has been done by the site admin after getting convinced with the ill motive behind it!
>>>>> WARNING!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
.
-----------------------------------------------------------------------
From: Bank of India <security@onlineupdate.com>
Date: Tue, Jan 19, 2010 at 7:58 AM
Subject: Security notification regarding your Internet Banking
Dear Bank of India customer,
We recently reviewed your account, and we are suspecting that your Internet Banking account may have been accessed from an unauthorized computer.
This may be due to changes in your IP address or location. Protecting the security of your account and of the Bank of India network is our primary concern.
We are asking you to immediately login and report any unauthorized withdrawals, and check your account profile to make sure no changes have been made.
To protect your account please follow the instructions below:
* DO NOT SHARE YOUR PASSWORD WITH OTHER USERS
* LOG OFF AFTER USING YOUR ONLINE ACCOUNT
Please click on the following link, to verify your account activity:
http://www.bankofindia.com/web/internetbank.aspx
We apologize for any inconvenience this may cause, and appreciate your support in helping us maintaining the integrity of the entire Bank of India system.
Please login as soon as possible.
Thank you,
Bank of India Customer Service.
-----------------------------------------------------------------------
>>>>> WARNING!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
>>>>>>> Clicking on the linked URL (http://pnbaccessonlineuser.com/pnbsecurity/netbanking/) in the e-mail will lead you to a FAKE WEB PAGE, asking you to enter your user ID and Password!
>>>>> WARNING!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
The bank has recently released a Security Alert (https://netbanking.netpnb.com/bayimgs/pnbibs/helpfile/SecurityAlert.htm) also stated in its communication that it does not send any email requesting for customer's account information or passwords. Also requested its customers to not to give away any such information and report any such mails.
>>>> See the Security Alert at: https://netbanking.netpnb.com/bayimgs/pnbibs/helpfile/SecurityAlert.htm
.
----------------------------------------------------------------------------------------
From: Punjab National Bank <support@swreg.org>
Date: 2010/1/16
Subject: Alert!
Dear Punjab National Bank customer,
We recently reviewed your account, and we are suspecting that your PNB Internet Banking account may have been accessed from an unauthorized computer.
This may be due to changes in your IP address or location. Protecting the security of your account and of the Punjab National Bank network is our primary concern.
We are asking you to immediately login and report any unauthorized withdrawals, and check your account profile to make sure no changes have been made.
To protect your account please follow the instructions below:
* DO NOT SHARE YOUR PASSWORD WITH OTHER USERS
* LOG OFF AFTER USING YOUR ONLINE ACCOUNT
Please click on the following link, to verify your PNB account activity:
http://pnbaccessonlineuser.com/pnbsecurity/netbanking/
We apologize for any inconvenience this may cause, and appreciate your support in helping us maintaining the integrity of the entire Punjab National Bank system.
Please login as soon as possible.
Thank you,
Punjab National Bank Security Advisor.
>>>>> WARNING!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
From: Punjab National Bank <xxxxxxx@xxxxxpnbxxxxxindiaxxxxx.com>
Date: 2010/1/13
Subject: Your account has been limited
Your account has been limited!
Please log into your account to fix this problem.
You need to follow all the steps in order to remove the limitation
Click on the following link to log In :
http://www.journeylog.co.uk/pnbindia.com/office.html
From: Punjab National Bank <xxxxx@xxxpnbxxxxindiaxxxx.com>
Date: 2010/1/13
Subject: Get your Refund Amount
You have get a Tax Refund on your Punjab National Bank MasterCard.
Complete the formular, and get your Refund Tax.
(Your Refund Amount Is 3200 rupees)
Complete Formular bellow :
http://lindsaysunley.eu/pnbindia/online.html
Copyright Š 2010 - Punjab National Bank. All rights reserved.
[SCAM] LAST WARNING : Your account is locked and will be deleted ! - .from CIMB Bank
0 Comments Published by Ebisu on at 3:44 AM.* Phishing SCAM: The luring of the internet users to reveal personal details (like passwords and credit card information) on a fake web page or email form pretending to come from a legitimate company (like their bank)
>>>>> WARNING!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
From: CIMB Bank <clickscimb@cimbclicks.com.my>
Date: Thu, Jan 14, 2010 at 7:28 AM
Subject: LAST WARNING : Your account is locked and will be deleted !
>>>>>>> A Picture is given just below this line linked to the URL: http://7search.com/scripts/search/click.aspx?t=p&qu=218.111.4.201/cimbclicks/online/aaa.html&a=0&s=sb&r=1&du=http%3a%2f%2f218.111.4.201/cimbclicks/online/aaa.html&cu=http%3a%2f%2f218.111.4.201/cimbclicks/online/aaa.html
-----------------------------------------------------------------------------------------------------
>>>>>>> Clicking on the above URL will lead you to a FAKE WEB PAGE, asking you to enter your user ID and Password!
-----------------------------------------------------------------------------------------------------
>>>>>>> On submitting your details (ANYTHING TYPED WILL BE ACCEPTED!!! ) you will be taken to a another FAKE WEB PAGE with following text!
We have sent a six digit TAC Code to your Pre-registered mobile phone to confirm your identity.
Wait 5 minutes to receive your TAC code and as soon as you have received the code, please enter it below to complete the transaction:
-----------------------------------------------------------------------------------------------------
Thank you for your time. Allow us a few hours to verify and secure your account.
Please do not access your account until you will receive the confirmation email.
You can click here anytime and re-enter your TAC code.
>>>>>> The above text will be linked to either: http://61.181.83.65/cimb/cimbnou/b.html
Or
http://218.111.4.201/cimbclicks/online/b.html
Where you can re-enter as many times as you wish!!
-----------------------------------------------------------------------------------------------------
>>>>> WARNING!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
[Hoax] Important Notification From Punjab National Bank
0 Comments Published by Ebisu on Jan 10, 2010 at 10:11 AM.This mail comes with an HTML Form page named 'restore_form.html' attached. It was made to look like an official one from the Punjab National Bank to deceive the unsuspecting users. This HTML form asks to give Punjab National Bank (PNB) Debit/Credit Card details to Restore your online account! If some one enters the details and submits the form, the details are sent to a page (PHP Script) hosted at: http://salamascuns.com/w.php
After snatching the sensitive information, the script hosted on the fake website directs the users to the a page on the official PNB website (http://pnbindia.in/english_web/mission.htm) - in a new window to make whole thing look genuine!!
A copy of the HTML form is given below.
WARNING!!: THIS FORM IS GIVEN HERE FOR YOUR INFORMATION ONLY!. PLEASE DO NOT ENTER REAL CARD NUMBER AND PIN ON THIS FORM!!
-------------------------------------------------------------------------------------------
Restore your online accountYou have received this file because your Punjab National Bank Online Account has been temporarily suspended.Please fill out and submit this form in order to restore your account. | |
| PNB Card Number | |
| PNB Card Expiration Date | - (month - year) |
| PNB Card Security Code | |
| PNB Card PIN | |
| Copyright © 2010. Punjab National Bank. All rights reserved. | |
-------------------------------------------------------------------------------------------
WARNING!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
>>> The text of the Hoax mail body is given below:
===========================================
From: Punjab National Bank <memberservice@xxxonline.com>
Date: Sat, Jan 9, 2010 at 9:43 PM
Subject: Important Notification From Punjab National Bank
Dear Valued Customer,
This is an official notification from Punjab National Bank . Your
account access has been limited due to a login attempt failure.
To restore your account we have attached a form to this
email.Please download the form and follow the instructions on
your
screen.
NOTE: The form needs to be opened in a modern, javascript
enabled, browser (ex: Internet Explorer 8, Firefox 3, Safari 3,
Opera 9).
We are continually improving our Web site to better serve you. Be
sure to check back with us often as we add exciting new services
to meet your financial needs.
If you have questions or need assistance, our customer service
team is here to help.
Thank you for using Punjab National Bank !
-----------------------------------------------------------------
-------------------------------------------------------------
DO NOT REPLY TO THIS EMAIL. IF YOU HAVE QUESTIONS PLEASE CONTACT
US
WARNING AGAIN!!: Please do not give your details to any Official Looking web pages which are not hosted on the Official Domain/Server.
