-
February 17th, 2006, 12:33 AM
#1
"Chase Bank" phishing Scams
Anyone here been getting e-mails from so called "Chase Bank"?
for the past 2 days, ive gathered 4-5 domains. And i was hoping that its 1-3 servers just registered in many domains, however it isnt. each site has its own unique ip address. and the e-mails are properly scripted. The mail comes as html format with javascript embedded in the legit link.
once u click it, u will be reditected to 2 sites. the final site will have the phising page, but the address on the address bar is fake, its an image. u cant copy the text.
There are a lot of these Chase phishing e-mails, and the re-direction and phishing pages are more complex than the common ones you see.
below is a sample of the phishing scam, but the original format wont be in it.
--------------- E-mail starts here -------------------------------------------------------------
From: <chase@reply130.chase.com>
To: <robbiegrove@hotmail.com>
Subject: Message ID 93775419 IMPORTANT: Update Your Account
Date: Thu, 16 Feb 2006 11:39:31 -0300
Dear Chase Customer
Thank you for submitting the requested information about your account.
We have compared the information that you have supplied and the ATM Pin number is not the same as the one in our records.
To ensure that your account is not compromised please login to Chase Internet Banking by clicking this link, verify your identity, your account information and supply a valid ATM Pin number in order to get your acount reactivated by our system.
- Click on:
https://chaseonline.chase.com/chaseo.../sso_logon.jsp
Mouse over actually said javascript:ol('http://chase-forms.com/.../');
- Enter your personal information and supply a valid ATM Pin number.
- Verify your identity with Chase
If at any time you require assistance, please contact our Online Account Services customer hotline at 1-800-788-7000 24 hours a day, 7 days a week.
Thank you for using Chase Online Account Services.
Sincerely,
Genevieve Smith -
Chase Security Department
© 2006 Chase,Inc . All rights
------------------------------ E-mail ends here -------------------------------------------------------------
-
February 17th, 2006, 01:02 AM
#2
Banned
sad if the mouse hover said anything in that area, how unprofessional eh?
-
February 17th, 2006, 01:25 AM
#3
lol atleast they TRY to hide it, ive seen some that just give u straight out-right the dodgy link. LOL
-
February 17th, 2006, 01:38 AM
#4
Yep, it is a registered domain through a Russian domain mill. Phoney, but registered:
chase-forms.com = [ 67.163.235.100 ]
Registrant:
Janice Mann 3eeeeetet@aol.com
1.3477274249
Private person
120 Terrace CT
Woodbury NY UNITED STATES 11797
Domain Name: chase-forms.com
Record last updated at 2006-02-16 07: 14: 07
Record created on 2006/2/16
Record expired on 2007/2/16
Domain servers in listed order:
ns1.kruchek.net ns2.kruchek.net
Administrator:
name: Janice Mann
mail: 3eeeeetet@aol.com
tel: 1.3477274249
org: Private person
address: 120 Terrace CT
city: Woodbury
province: NY
country: UNITED STATES
postcode: 11797
<<< snip >>>
postcode: 11797
Registration Service Provider:
name: Regtime.net
tel: 7 8462788201
fax: 7 8462788201
http://www.webnames.ru
-
February 17th, 2006, 01:46 AM
#5
yeah thats just one domain, i have about 5 here. and thats all within 2 days collecting them
-
February 17th, 2006, 03:30 AM
#6
and supply a valid ATM Pin number in order to get your acount reactivated by our system.
I think they went a little overboard on this one. Still, they probably got someone. A question: Does any legitimate company do any kind of account transactions through e-mail? I think I've seen statements that they don't.
For the wages of sin is death, but the free gift of God is eternal life in Christ Jesus our Lord.
(Romans 6:23, WEB)
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|