Need help? Ask the community or hire an expert.
Go to Avira Answers
Target:Bank of the West
Date discovered:13/12/2012

 General The goal is to get the following information:
    • Bank account
    • Email account


Phishing method:
    • URL link

 Email Details From: service@bankofthewest.com
Subject: CONSUMER ALERT : Protect Yourself Against Financial Fraud !

Visible link: https://etimebanker.bankofthewest.com/BOW/PP090292753form.htm
Actual link: http://62.193.211.175/ /etminebanker.bankofthewest.com/BOW/index.php
IP address: 62.193.211.175


The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
    • The Body of the email contains HTML content.



This screenshot is how the phishing email looks like:


 Page Details Visible URL: http://62.193.211.175/%20/etminebanker.bankofthewest.com/BOW/index.php
Actual URL: http://62.193.211.175/%20/etminebanker.bankofthewest.com/BOW/index.php
IP address: 62.193.211.175


The phishing page will look like the following:



Description inserted by Dominik Auerbach on Saturday, August 6, 2005
Description updated by Cosmin Ancuta on Tuesday, August 16, 2005

Back . . . .