Welcome to the SecAware blog

I spy with my beady eye ...

7 Mar 2008

Inept phisher award

I just thought I'd share this little gem with you. It's possibly the most inept phishing email I've seen. The phisher has evidently heard of "ISO 27001" certificates and either hasn't got a clue what that means, or figures most of his victims won't understand.

I have removed the embedded URL for your safety. Who knows what kind of inept malware might be lurking there?

-----Original Message-----
From: Wachovia Connection banking Consumer support [mailto:techsupport@wachovia.com]
Sent: Thursday, 6 March 2008 11:14 p.m.
To: press@globalsecurityweek.com
Subject: Notice: : New Certificates 2008 wachovia.com


All Users - Must Accept New Digital Security Certificate 2008 (SecurityISO 27001 Certification Consulting)

Customers of numerous banks have been victims of ACH and wire transfer fraud in recent weeks, resulting in the origination of unauthorized ACH entries and wire transfers from customers' computer systems.

Wachovia Enhanced Security Authentication
We have enhanced the Wachovia security access to further safeguard access to your account information.

Starting from tomorrow system of access to work fields is transferred to coding with a certificate. It means that your password and ID will not be changed but will be logged differentially. The only necessary conditions includes the following: you only need to log the first source-certificate which will generate further conversion. Thereto you have to follow the link http://wc.wachovia.com/online [real URL deleted GH] and enter your access code and ID in the appropriate fields.

We would like to draw your attention to the fact that all fields must be filled out, otherwise the system will block escape to the next level and you can not start work with your personal data.

Should all necessary fields be filled in and password and ID concur with those registered in our system, you will get access to the work field. After that your personal identification Certificate will be successfully logged in the system. No other operations from your part are required.

Thank you for cooperation and support.
IT Security Department

¿ 2008 Wachovia Corporation. All rights reserved.

No comments:

Post a Comment