New phishing attack uses real ID hooks

[whatthe]

According to Cyota, the phishing e-mails arrive at bank customers' in-boxes featuring accurate account information, including the customer's name, e-mail address and full account number. The messages are crafted to appear as if they have been sent by the banks in order to verify other account information, such as an ATM personal-identification number or a credit card CVD code, a series of digits printed on the back of most cards as an extra form of identification.

http://news.com.com/New+phishing+att...l?tag=nefd.top

[Tiger Shark]

The problem here really is that the user is already partially compromised and this is just the "capper". They may already have had their ID stolen but the greedy bastards need access to one last account...