Security Alert: Suspicious Activity - Bank of America Alert Phishing Scams

Bank of America Alert


Date Reported: 22nd December 2016	Risk Level: MEDIUM-HIGH

Email Subject:

Security Alert: Suspicious Activity

Apparent Sender:

Bank of America Alert

Return Address:

onlinebanking@bankofamerica.com

Email Format:

HTML

URL of Web Content:

http://customwoodworkscorp.com/wp-includes/SimpleP
ie/Content/Type/Sniffer/index.php

Anchor text of URLs:

1) Online Banking Alert
Your Online Banking is Blocked
Security Checkpoint: You last signed
in to Online Banking on 12/21/2016. Remember:
Always look for your SiteKey® before entering
your Passcode. We recently reviewed
your account and suspect that your Bank of
America account might have been accessed by
an unauthorized third party. Protecting the
security of your account is our primary
concern, therefore as a preventive measure,
we have temporarily limited access to
sensitive account features. To restore your
account access, we need you to confirm
your identity. Please follow the link below
to proceed to confirming your
account information. https://secure.bankofam
erica.com/login/sign-in/signOnScreen.go?msg=V
alidateOnlineInfo&request_locale=&lpO
lbResetCounter

Location:

DALLAS, TEXAS, UNITED STATES

Scam number:

25623-286220-633159

Comments:

Email asks you to confirm/update/verify your account data at Bank of America Alert by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.

Bank of America Alert never send their users emails requesting personal details in this way.

X-MIME-Autoconverted: from 8bit to
quoted-printable by cape-solutions.com id
uBMFFBFZ057177

To ensure delivery, add
onlinebanking@ealerts.bankofamerica.com to
your address book.
Exclusively for: | Valued Online Banking
Customer

ONLINE BANKING ALERT
YOUR ONLINE BANKING IS BLOCKED
SECURITY CHECKPOINT:
YOU LAST SIGNED IN TO ONLINE BANKING ON
12/21/2016.
REMEMBER: Always look for your SiteKey®
before entering your Passcode.
We recently reviewed your acco...

Website:

See our most recent scam reports

Browse our scam report archives

Search

Please send us any scam/phishing emails you have received by reporting them here

For access to our huge blacklist of domain names and to sign up to our live feed of ALL the scams we receive please take a look at our Honeytrap service

If you have received the email below, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content, such as a different subject or return address, or with the fake webpage(s) hosted on a different webserver.

We aim to report every variant of the scams we receive, so even if it appears that a scam you receive has already been reported, please submit it to us anyway.