"Chase Bank" phishing Scams
Results 1 to 6 of 6

Thread: "Chase Bank" phishing Scams

  1. #1
    Fastest Thing Alive s0nIc's Avatar
    Join Date
    Sep 2001
    Location
    Sydney
    Posts
    1,584

    "Chase Bank" phishing Scams

    Anyone here been getting e-mails from so called "Chase Bank"?

    for the past 2 days, ive gathered 4-5 domains. And i was hoping that its 1-3 servers just registered in many domains, however it isnt. each site has its own unique ip address. and the e-mails are properly scripted. The mail comes as html format with javascript embedded in the legit link.

    once u click it, u will be reditected to 2 sites. the final site will have the phising page, but the address on the address bar is fake, its an image. u cant copy the text.

    There are a lot of these Chase phishing e-mails, and the re-direction and phishing pages are more complex than the common ones you see.


    below is a sample of the phishing scam, but the original format wont be in it.


    --------------- E-mail starts here -------------------------------------------------------------

    From: <chase@reply130.chase.com>
    To: <robbiegrove@hotmail.com>
    Subject: Message ID 93775419 IMPORTANT: Update Your Account
    Date: Thu, 16 Feb 2006 11:39:31 -0300


    Dear Chase Customer

    Thank you for submitting the requested information about your account.
    We have compared the information that you have supplied and the ATM Pin number is not the same as the one in our records.

    To ensure that your account is not compromised please login to Chase Internet Banking by clicking this link, verify your identity, your account information and supply a valid ATM Pin number in order to get your acount reactivated by our system.

    - Click on:
    https://chaseonline.chase.com/chaseo.../sso_logon.jsp
    Mouse over actually said javascript:ol('http://chase-forms.com/.../');

    - Enter your personal information and supply a valid ATM Pin number.
    - Verify your identity with Chase

    If at any time you require assistance, please contact our Online Account Services customer hotline at 1-800-788-7000 24 hours a day, 7 days a week.

    Thank you for using Chase Online Account Services.



    Sincerely,
    Genevieve Smith -
    Chase Security Department

    2006 Chase,Inc . All rights

    ------------------------------ E-mail ends here -------------------------------------------------------------

  2. #2
    Banned
    Join Date
    Jul 2004
    Posts
    119
    sad if the mouse hover said anything in that area, how unprofessional eh?

  3. #3
    Fastest Thing Alive s0nIc's Avatar
    Join Date
    Sep 2001
    Location
    Sydney
    Posts
    1,584
    lol atleast they TRY to hide it, ive seen some that just give u straight out-right the dodgy link. LOL

  4. #4
    Banned
    Join Date
    Apr 2003
    Posts
    1,147
    Yep, it is a registered domain through a Russian domain mill. Phoney, but registered:

    chase-forms.com = [ 67.163.235.100 ]

    Registrant:
    Janice Mann 3eeeeetet@aol.com
    1.3477274249
    Private person
    120 Terrace CT
    Woodbury NY UNITED STATES 11797
    Domain Name: chase-forms.com
    Record last updated at 2006-02-16 07: 14: 07
    Record created on 2006/2/16
    Record expired on 2007/2/16
    Domain servers in listed order:
    ns1.kruchek.net ns2.kruchek.net
    Administrator:
    name: Janice Mann
    mail: 3eeeeetet@aol.com
    tel: 1.3477274249
    org: Private person
    address: 120 Terrace CT
    city: Woodbury
    province: NY
    country: UNITED STATES
    postcode: 11797
    <<< snip >>>
    postcode: 11797
    Registration Service Provider:
    name: Regtime.net
    tel: 7 8462788201
    fax: 7 8462788201
    http://www.webnames.ru

  5. #5
    Fastest Thing Alive s0nIc's Avatar
    Join Date
    Sep 2001
    Location
    Sydney
    Posts
    1,584
    yeah thats just one domain, i have about 5 here. and thats all within 2 days collecting them

  6. #6
    Senior Member
    Join Date
    Feb 2002
    Posts
    856
    and supply a valid ATM Pin number in order to get your acount reactivated by our system.
    I think they went a little overboard on this one. Still, they probably got someone. A question: Does any legitimate company do any kind of account transactions through e-mail? I think I've seen statements that they don't.
    For the wages of sin is death, but the free gift of God is eternal life in Christ Jesus our Lord.
    (Romans 6:23, WEB)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides