Alerts

BOOKMARK THIS ALERT
  digg   |     del.icio.us   |     reddit
  newsvine   |     furl   |     technorati

Florida Commerce Credit Union

Date:09.09.2005

Threat Type: Phishing Alert

Websense® Security Labs™ has received reports of a new phishing attack that targets customers of Florida Commerce Credit Union. Users receive one of several spoofed email messages that attempt to lure the user into clicking on a link. In one of the example emails below, the user is told $5.00 will be credited to their account in exchange for their participation in an online survey being conducted by the credit union. Users who follow the link are asked to enter their account number and password, followed by their credit card information.

This phishing site is hosted in the United States, and was up at the time of this alert.

The following is a sample of the phishing email.

Dear Florida Commerce Customer

Florida Commerce Credit Union is currently conducting a short five (5) question survey about our general customer satisfaction online banking service - "Not for profit, not for charity, but for service"

In return for your participation $5.00 USD will be credited to your selected account.

Florida Commerce strives to become your primary financial institution by building a solid relationship with you. By helping us better understand how our customers feel benefits everyone. With the information collected we can decide to direct a number of changes on our online service to better improve & expand our existing online banking structure - More suited to your or your business needs.
Florida Commerce Credit Union, your member owned financial institution, is committed to providing you with competitive products and services to meet your financial needs and help you reach your goals.

To proceed to survey page please click the link below,
<URL Removed>

For your security a link can also be found on the Florida Commerce Credit Union home page.
Thank you, We look forward to your participation.

Phishing email screenshot #1:

Phishing site screenshot #1:

Phishing site screenshot #2: