Phishing Alert: New Fraudulent Bank / Technique

WebsenseŽ Security Labs has received several reports of a new phishing attack that does not target any particular financial or ecommerce brand. Users receive an email from the bank welcoming them as a customer, and claiming that they are the beneficiary to funds from the Alliance Security and Finance Company in Amsterdam. The email includes a URL to the bank and a username and password to log into their "account."

Upon accessing the bank website, an option is provided to log in to their account with this bank, using the login information provided in the email. When the user logs in, the account information is displayed, along with a balance of more than 9 (nine) million dollars.

The website then requests that the user transfer the funds to their own bank account, and requests that details of that account be entered in order to perform the transfer. This is very similar to the Nigerian 419 Scams that have been around for some time now. The phishing site is hosted in the UK and was up at the time of this alert. WebsenseŽ - Security Labs Alert: New Fraudulent Bank / Technique

Linked by shanmuga Thursday, 24th November 2005 2:25AM