Comments on: WaMu Customers Beware of Phishing Emails http://www.jonesmeadows.info/2007/06/05/wamu-customers-beware-of-phishing-emails/ A South Jordan Utah Community Tue, 06 Jan 2009 01:29:52 +0000 http://wordpress.org/?v=2.2.1 By: phpkemist http://www.jonesmeadows.info/2007/06/05/wamu-customers-beware-of-phishing-emails/#comment-3 phpkemist Mon, 02 Jul 2007 02:00:25 +0000 http://www.jonesmeadows.info/2007/06/05/wamu-customers-beware-of-phishing-emails/#comment-3 Bank of The West Phishing Scam The email contains a link displayed as this: cib-id-106269640.bankofthewest.com/BOW/WebDirect/start.ac ... but the actual link goes to: cib-id-106269640.bankofthewest.com.toomid.hk/BOW/WebDirect/start.ac Note the ".toomid.hk" section of the actual link takes you to a totally different host, but the address looks similar enough to bankofthewest.com to fool casual users. ALWAYS check the actual web address in your browser to assure you are at the real website, but it's better to inspect your emails carefully before even getting that far. ***** START SCAM EMAIL CONTENT ***** Dear Bank of the West client, Bank of the West Customer Service requests you to complete Bank of the West Business/Corporate Customer Details Update Form. This procedure is obligatory for all business and corporate clients of Bank of the West. Please select the hyperlink and visit the address listed to access Bank of the West Business/Corporate Customer Details Update Form. cib-id-106269640.bankofthewest.com/BOW/WebDirect/start.ac Again, thank you for choosing Bank of the West for your business needs. We look forward to working with you. ***** Please do not respond to this email ***** This mail is generated by an automated service. Replies to this mail are not read by Bank of the West Customer Service or technical support. =================================================================== ***** END SCAM EMAIL CONTENT ***** Bank of The West Phishing Scam

The email contains a link displayed as this:
cib-id-106269640.bankofthewest.com/BOW/WebDirect/start.ac

… but the actual link goes to:
cib-id-106269640.bankofthewest.com.toomid.hk/BOW/WebDirect/start.ac

Note the “.toomid.hk” section of the actual link takes you to a totally different host, but the address looks similar enough to bankofthewest.com to fool casual users.

ALWAYS check the actual web address in your browser to assure you are at the real website, but it’s better to inspect your emails carefully before even getting that far.

***** START SCAM EMAIL CONTENT *****
Dear Bank of the West client,

Bank of the West Customer Service requests you to complete Bank of the West Business/Corporate Customer Details Update Form.

This procedure is obligatory for all business and corporate clients of Bank of the West.

Please select the hyperlink and visit the address listed to access Bank of the West Business/Corporate Customer Details Update Form.

cib-id-106269640.bankofthewest.com/BOW/WebDirect/start.ac

Again, thank you for choosing Bank of the West for your business needs. We look forward to working with you.

***** Please do not respond to this email *****

This mail is generated by an automated service.
Replies to this mail are not read by Bank of the West Customer Service or technical support.

===================================================================
***** END SCAM EMAIL CONTENT *****

]]> By: phpkemist http://www.jonesmeadows.info/2007/06/05/wamu-customers-beware-of-phishing-emails/#comment-2 phpkemist Thu, 07 Jun 2007 16:40:07 +0000 http://www.jonesmeadows.info/2007/06/05/wamu-customers-beware-of-phishing-emails/#comment-2 The latest subject line for the same email: WAMU: urgent notification from corporate customer cervice! (message id: vo562093792) The "message id" is likely changing for each email. The latest subject line for the same email:
WAMU: urgent notification from corporate customer cervice! (message id: vo562093792)
The “message id” is likely changing for each email.

]]>