Security Labs

Alerts

BOOKMARK THIS ALERT
  digg   |     del.icio.us   |     reddit
  newsvine   |     furl   |     technorati

Cyprus Credit Union

Date:02.01.2006

Threat Type: Phishing Alert

Websense® Security Labs™ has received reports of a new phishing attack that targets customers of Cyprus Credit Union. Users receive a spoofed email, which claims their account has had multiple unsuccessful login attempts. The email says that users need to validate their account information or the account will be suspended indefinitely. The message provides a link to a phishing website that requests users' personal and card information.

The phishing site is hosted in the Czech Republic and was up at the time of this alert.

Phishing email:

Dear Cyprus Credit Union Member ,

Cyprus Credit Union is devoted to keeping a safe environment for its community of consumers and producers. To guarantee the safety of your account, Cyprus Credit Union deploys some of the most advanced security measures in the world and our anti-fraud units regularly screen the Cyprus Credit Union database for suspicious activity.

We recently have discovered that multiple computers have attempted to log into your Cyprus Credit Union Online Banking account, and multiple password failures were presented before the logons. We now require you to re-validate your account information to us. If this is not completed by February 31, 2006, we will be forced to suspend your account indefinitely, as it may have been used for fraudulent purposes. We thank you for your cooperation in this manner.

In order to confirm your Online Bank records, we may require some specific information from you.

Please Click   Here or on the link below to verify your account

<URL REMOVED>

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account.
We apologize for any inconvenience.

If you choose to ignore our request, you leave us no choice but to temporary suspend your account.

Cyprus Credit Union Security Team


Phishing site screenshot: