|
Date Reported: 17th December 2009  |
Risk Level: MEDIUM |
|
| |
 |
 |
| |
Email Subject: |
For attention of Ally Bank (former GMAC Bank) customer |
|
Apparent Sender: |
CustomerCare@ally.com |
|
Return Address: |
Not found |
|
| Email Format: |
HTML |
| |
URL of Web Content: |
http://secure.ally.com.icithil1.be/WebClient/ccare
/cform.do?id9816913958503321767211384476802328078
552303957&email=budman-usa@seibercom.net
|
|
Anchor text of URLs: |
1)
http://secure.ally.com/allyWebClient/ccare/cf
orm.do?id98169139585033217672113844768023280
78552303957&email=budman-usa@seibercom.net |
|
Location: |
Location not available |
| |
Scam number: |
6546-87714-301425 |
| |
Comments: |
- Email asks you to confirm/update/verify your account data at CustomerCare@ally.com by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.
- CustomerCare@ally.com never send their users emails requesting personal details in this way.
- The anchor text appears as a legitimate URL, but don't be fooled - clicking on it will take you to a phishing site!
- The spoof website this email links to was not online at time of this report, but variations of the scam which link to working websites are bound to exist, so be wary! The website may have been taken down or disabled by the hosts, but quite often these websites are hosted on the personal computer of the phishers, so may only be online at certain times.
|
| |
|
|
|
 |
| |
|
| |
Dear Ally Bank (former GMAC Bank) customer,
According to the new Terms & Conditions you
need to update your online records. Please
update your records using the
link:
http://secure.ally.com/allyWebClient/ccare/c
form.do?id9816913958503321767211384476802328
078552303957 (ii) do not
disclose,
distribute or use the message in any manner;
and (iii) notify the sender immediately. In
addition,
please be aware that any message addressed
to our domain is subject to...
|
|
Click for full size image |
| |
| Website: |
|
|
| |
|
| Website was not online when we checked. It returned the error 400 |
