Urgent issue : Citibank® account information - Spoof Email Phishing Scam
21st February 2004

HIGH RISK!!

" Dear CitiBank Acount Holder, On February 19th 2004 Citibank had to block some accounts in our system connected with money laundering, credit card fraud, terrorism and check fraud activity ... "

read also our brief guide to Phishing

This Citibank email (see image below) is a forgery and one which urges you to use the link provided to 'check' your account balance or notify them of suspected fraudulent activity.

We are marking this scam as HIGH RISK because it suggests a seemingly innocent action (log into your account and check your balance). As well as this, the link is disguised to appear to be a genuine Citibank link and will indeed open the genuine Citibank home page, but with a small 'pop up' window that asks you to enter your Credit card number, PIN and cvv code (see image below).

The pop up is coded to not show an address bar or allow you to use right click to determine its origin, and with the genuine Citibank home page as a back drop, we expect that this scam will net many victims.

The actual process that opens these two pages is fairly complex ... first the link will direct your browser to http://217.8.136.144/bun.html which will then send you to www.aldrich.com.my/.... which then triggers the opening of the two windows.

This scam closely resembles other recent Citibank Email Scams. As always, we must remind you that these scams commonly resurface at a later date but with different content or bogus pages hosted in different web space.

The Email ...

The Bogus Web Page Pop Up...