"FDIC" Phishing Email

Posted 3/11/2011

The Federal Deposit Insurance Corporation (FDIC) has received numerous reports of a fraudulent email that has the appearance of being sent from the FDIC. The email appears to be sent from “accounts@fdic.gov” and includes a subject line that states: “About your business account.”

The email is addressed to “Business Customers” and states “We have important information about insurance coverage of your business accounts." It then asks recipients to “Please click here to view details” and includes a hyper link to a website.

The email says that it is from “Alyssa Williams, FDIC Insurance.”

This email and link are fraudulent. Recipients should consider the intent of this email as an attempt to collect personal or confidential information, or to load malicious software onto end users’ computers. Recipients should not click on the link provided.

The FDIC does not issue unsolicited emails to consumers or business account holders.

 

"Electronic Payment Association" Phishing Email

Posted 8/23/2010

NACHA – The Electronic Payments Association has received reports that individuals and/or companies have received a fraudulent email that has the appearance of having been sent from NACHA and signed by a non-existent NACHA employee. See a sample of the email below. As always, do not open attachments or follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate. For more information, read the NACHA alert at: http://www.nacha.org/news/newsDetail.cfm/RecentBusinessNewsID/184.

= = = = = Sample Phishing Email = = = = =

Dear bank account holder,

The ACH transaction, recently initiated from your bank account (by you or any other person), was rejected by the Electronic Payments Association.

Please Find Attached Transaction Report

Paul Arnold, Electronic Payments Association Manager

 

Important security alert for business owners

Posted 6/17/2010

Just wanted to alert you of a spam e-mail making the rounds that attempts to steal passwords. The email is disguised in several ways: a fraud alert from the IRS, a Twitter account hijack warning, or a salacious You Tube video.

The fake IRS emails arrive with the subject line, "Notice of Underreported Income," and encourage the recipient to click a link to review their tax statement.

Do not click this link. It will bring you to a fake IRS page where you could infect your computer with a password-stealing program.

Keep in mind the IRS does not communicate with citizens via email.

ViewPoint Bank has strong security measures in place to protect your ViewPoint accounts from such cyberattacks. However, your other accounts or information may be vulnerable. Please coordinate with your Internet or network administrator to ensure that your network and computers are updated and protected against this and other potential threats.

Krebs on Security, a security news website, alerted us to this scam and has additional information:
http://krebsonsecurity.com/2010/06/zeus-trojan-attack-spoofs-irs-twitter-youtube/.