Colonial Bank - Certificate Update - Colonial Bank Phishing Scams

Colonial Bank


Date Reported: 3rd May 2008	Risk Level: MEDIUM-HIGH

Email Subject:

Colonial Bank - Certificate Update

Apparent Sender:

Colonial Bank

Return Address:

< administration@colonialbank.com >

Email Format:

HTML

URL of Web Content:

http://connect.colonialbank. c7b6r59whf489lx967xq.secureserv. onlineupdatemirror29009095. colonial_certificaterenewal04_27_ 2008.colonialbanks.org/logon.htm

Location:

Romania

Scam number:

aa-6997

Comments:

Email asks you to confirm/update/verify your account data at Colonial Bank by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.

Colonial Bank never send their users emails requesting personal details in this way.

The REAL URL of the spoof website has been chosen to look very similar to the actual Colonial Bank URL. Do not be fooled!

"Connection-Colonial Bank Renewal (Last Notice!)"

Connection-Colonial Bank Renewal (Last Notice!)

Certificate Renewal
Personal (Smartcard) e-Cert & Personal e-Cert
Certificate owner must renew the certificate before expiry date.
Your certificate expiration date - 1may 2008.
The system will send email (Certificate Renewal Notice) to the certificate owner ten hours before the certificate is due to expire, if it has not been renewed. Upon receiving the renewal notice, certificate owner is required to connect to Colonial Bank Certificate Management System and present the client certificate.
Secure Server e-Cert & Developer e-Cert Certificate owner has the responsibility to renew the certificate before expiry date.
Successful renewed application will receive an email notification from Colonial Bank.
Applicant can just browse to the URL stated in the email and then download the certificate.

Download now>>

2003-2008 Colonial Bank, N.A.

Website:

See our most recent scam reports

Browse our scam report archives

Search

Please send us any scam/phishing emails you have received by reporting them here

For access to our huge blacklist of domain names and to sign up to our live feed of ALL the scams we receive please take a look at our Honeytrap service

If you have received the email below, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content, such as a different subject or return address, or with the fake webpage(s) hosted on a different webserver.

We aim to report every variant of the scams we receive, so even if it appears that a scam you receive has already been reported, please submit it to us anyway.