Latest Phishing Email attacked Bank Customers, affirms eScan

MUMBAI, INDIA- December 18, 2013: eScan, one of the leading Anti-Virus & Content Security solutions for Desktops & Servers affirmed the writing on the wall aboard the Cyberspace arena which from its turn tends to drive home the fact that- numerous Maybank customers might recently have fallen into the trap of phishing emails. It is believed that these emails were sent with an intention to steal the username and passwords of the customers.

Also, the phishing site was modulated in such a way that at every stride an email containing the customer’s data was being transmitted to the attacker again via email, that is. It so happened  that the email invited users to click on Maybank phishing websites and once the customer filled the phishing form and clicked on the submit button, post entering the username and password, the details were immediately sent to the attacker.

In the five step process, the attacker himself logs-in into the banking site, using the stolen credentials, meanwhile the bank sends the TAC to the victim’s contact number. The victim provides the TAC to the phishing page, which is received by the attacker via email and is able to complete the online verification process and hence gets complete access of the victim’s bank account. The attacker then is free to carry swindler activities. In this real-time phishing attack, the victim is literally left clueless and cybercriminals from their quarter, can siphon off the money.

Cyber frauds can make use of this information and can even change the banking credentials to lap up the money before the customer in question even notices that he or she was defrauded.