WebCert+ Phishing Attempt
UPDATE: Definitely phishing.
I recently got an email ostensibly from Bank of America. It said I needed to sign up for their new “WebCert+” service and if I didn’t, my account would be suspended and imposed a hefty $45 reactivation fee. I received one email (which went to Spam) containing an embedded web form in which I was to fill out all kinds of personal information. And three others adjuring me to fill it out lest terrible things happen to me and my bank account.
I think this is a phishing attempt. I want to know if there are others getting the same thing and if anyone can confirm that it is illegitimate.
My first clue that it’s a phishing attempt is that it’s sent from alerts@bankofamericaalerts.0nlinereport.com. These days it’s so easy (right?) to spoof a FROM address, you wonder why more people don’t.
Second was the embedded form. Who sends embedded email forms? I should have to log into my account online and _then_ fill out the form.
But all of that is circumstantial.
Anyone else see this or can confirm that it is attempted thievery?
5 Comments »
Leave a Reply
-
Recent Comments
MaRZ on Configuring Emacs for Gmail… Mark on Linear-time First UIP cal… dericbytes on Configuring Emacs for Gmail… Curtis on Configuring Emacs for Gmail… SLNR on WebCert+ Phishing Attempt StatCounter
-
Archives
- August 2011 (1)
- July 2011 (1)
- May 2011 (1)
- March 2011 (2)
- November 2009 (1)
- July 2009 (1)
- March 2009 (2)
- July 2008 (1)
- May 2008 (1)
- April 2008 (1)
- March 2008 (1)
- February 2008 (1)
-
Categories
-
RSS
Entries RSS
Comments RSS
I just received the same email. I’m going to treat it as thievery, though I have nothing to confirm that other than my gut
I received this as well. It is most definitely a phishing attempt. If you look at the original message, the place where it asks you all the personal and detailed information in a web form embeded in an email…. (red flag already).
That webform has this –
So, you are submitting your personal banking information and other personal details to a domain mobercitymains.com… That is a bad idea!
Apparently, the form info I pasted got striped out. The form submitted to a domain “molbercitymains . com”
Definitely phishing. Just check the spam email and the top BofA image points to: http://ratesinnycity.co.uk/t_files/olb_masthead_nonav.gif. You’ll also note that the email comes from onlinebanking@bankofamericaalerts.0nlinereport.com (note that the domain is 0nlinereport.com, with a zero “0″).
Banks also always require that you log into their portal to do anything as well, including extra “validation” requests. If you need to, I’d call the bank on the phone (use the one on your statement or bank card) and ask about this “webcert+” if you’re still unsure.
They sent it to my student email, which is not the email address I use for my BoA account.
The website it directs you to also is not bankofamerica.com
Finally, it says that the service is mandatory starting August 1, 2011. Yet I get the email a week later? Good try.