Alerts

BOOKMARK THIS ALERT
  digg   |     del.icio.us   |     reddit
  newsvine   |     furl   |     technorati

South Carolina Federal Credit Union

Date:10.06.2005

Threat Type: Phishing Alert

Websense® Security Labs™ has received reports of a new phishing attack that targets customers of South Carolina Federal Credit Union. Users receive a spoofed email message which indicates that their account information must be confirmed. Users are instructed to click on a link contained in the email to begin this process. Users are then taken to a phishing site that requests account number, password, name, address, and ATM card information.

This phishing site is hosted in Japan and was up at the time of this alert.

Phishing email body sample:

Dear Customer,
At South Carolina Federal Credit Union, the highest responsability to our customers is the safekeeping of confidential information you have entrusted to us and using it in a responsable manner. A fundamental element of safeguarding your confidential information is to provide protection against unauthorized access or use of this information. We maintain physical, electronic and procedural safeguards that comply with federal guidelines to guard your nonpublic personal information against unauthorized access.

At this time we need you to confirm your e-mail address with our existing database. As soon as our database will be updated we need to make few important anouncements to our customers so please update your contact information with no delay.

<URL REMOVED>

Our database will be instantly updated.

We are committed to the responsable use and protection of customer information on our website. If you have any questions regarding our services, please check the website or call our customer service.

Best Regards,
South Carolina Federal Credit Union Online Department.

Phishing site screenshot 1:

Phishing site screenshot 2: