America First Credit Union

Date:03.10.2005

Threat Type: Phishing Alert

Websense® Security Labs™ has received reports of a new phishing attack that targets customers of America First Credit Union. Users receive a spoofed email from the America First customer care department that says a new security feature has been implemented and in order to keep their accounts up to date, users need to connect to the website. If users click on the URL, they are directed to a fraudulent website which requests their card number, PIN, expiry date, and account number.

 

The site is hosted in the United States.

 

Phishing email body:

 

From: Nuttall Michael S Contr OO-ALC/MANLW
Subject: FW: New Security Features - Confirmation Required

In case anyone receives an e-mail like this one do NOT reply, it is a scam trying to
get your personal info.

_____

Subject: FW: New Security Features - Confirmation Required

I received the below e-mail yesterday and contacted the America First Credit Union.
Their representative advised me to forward the e-mail (which I did) to their e-mail
fraud office. The representative stated that America First never send e-mails to
confirm or activate accounts. Thought I should pass this on just in case others
received the same e-mail.

Ms. Billie Massengale Content Management Specialist - IMTs Content Management (75
CS/SCSP) Hill AFB, Utah 84405-5817 Commercial: (801) 777-3913; DSN: 777-3913 FAX:
(801) 775-2318; DSN: 775-2318 "Every day is a great day, but granted some days are
more fun than others"

_____

From: America First [mailto:customer_care@americafirst.com] Sent: Wednesday, March
02, 2005 7:14 AM To: <email removed> Subject: New Security Features -
Confirmation Required

URL's removed

_____

Account Confirmation Required America First Credit Union is pleased to announce new
security features for our Web Access Internet Banking accounts. In order to keep
your account current and enjoy the full benefits we require you to confirm and
ACTIVATE your account in our new system. After you have confirmed your account with
us, you will continue to be provided with the quality and service you are already
accustomed to. With new features, better usability, and other refinements, Web
Access gives you the freedom to coordinate your finances according to your schedule.

* View 30-day history information instantly

* Search for specific transactions

* Plan and establish your financial goals

* Export information using Quicken® or Money® In addition to viewing account
information, traditional features allow you to:

* Transfer funds within your AFCU accounts

* View canceled checks
<http://www.americafirst.com/redirect/clickthrough.cfm?Dest=CheckView>
electronically

* Pay bills online
<http://www.americafirst.com/redirect/clickthrough.cfm?Dest=PaymentPartner>
--and do it for FREE

* Access your monthly statements
<http://www.americafirst.com/redirect/clickthrough.cfm?Dest=eStatement>
instantly

* Order new checks

Please click on the Next button below to continue our confirmation process, please
be ASSURED this will take you directly to our website. It is important that you
ACTIVATE your account so we can update our database accordingly.

URL's removed

 

Phishing web site screenshot: