Security Labs

Alerts

BOOKMARK THIS ALERT
  digg   |     del.icio.us   |     reddit
  newsvine   |     furl   |     technorati

University of Delaware Federal Credit Union

Date:09.13.2006

Threat Type: Phishing Alert

Websense® Security Labs™ has received reports of a new phishing attack that targets customers of the University of Delaware Federal Credit Union. Users receive a spoofed email, which claims that, in order to fight terrorism and money laundering activities, their account details need to be verified and confirmed. The link provided in the message leads to a phishing site requesting personal details such as account number, user ID, and password.

This phishing site is hosted in the Republic of Korea and was down at the time of this alert.

Phishing email text:

ACCOUNT VERIFICATION
To help the government fight the funding of terrorism and money laundering activities, Federal law requires all financial institutions to obtain, verify and record information that identifies each person who has an account.
What this means for you:  We need to verify your account. We ask for your name, social security number, and other information that will allow us to identify you.  We may also ask to see your other identifying documents.
This process is simple, and you can start by clicking the link below and complete the required information online:
< URL REMOVED >
Your information must be verified within the next 48 hours. Unverified accounts will be blocked until further notice. Please be assured that UDEL-FCU continuously takes every precaution 
to protect our valued members' confidential information.

Phishing screenshot: