Need help? Ask the community or hire an expert.
Go to Avira Answers
Target:Regions Bank
Date discovered:03/08/2007

 General The goal is to get the following information:
     Bank account
     Personal data


Phishing method:
     'Click here' link

 Email Details From: customerservice@regions.com
Subject: Regarding Your Regions Account

Visible link: click here To start the confirmation procedure
Actual link: http://www.securedtreasurymanagement.com/regionsnet.com/RN/index...
IP address: 218.64.72.122


The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
     The Body of the email contains HTML content.



This screenshot is how the phishing email looks like:


 Page Details Visible URL: http://www.securedtreasurymanagement.com/regionsnet.com/RN/index...
Actual URL: http://www.securedtreasurymanagement.com/regionsnet.com/RN/index...
IP address: 218.64.72.122


The phishing page will look like the following:




Description inserted by Dominik Auerbach on Saturday, August 4, 2007

Back . . . .