TCF Bank 4 - Phishing

See also

Summary

Full description

Target:	TCF Bank
Date discovered:	07/02/2007

General The goal is to get the following information:
• Bank account

Phishing method:
• URL link

Email Details From: TcfAlerts@alerts.tcf.com
Subject: Your Online Banking Account Update

Visible link: http://www.tcfexpress.com/PersonalBanking/index.jsp?update/
Actual link: http://www.bcgjeddah.com/update/tcf%20online%20banking/index.htm
IP address: 64.72.112.104

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: http://www.bcgjeddah.com/update/tcf%20online%20banking/index.htm
Actual URL: http://www.bcgjeddah.com/update/tcf%20online%20banking/index.htm
IP address: 64.72.112.104

The phishing page will look like the following:

See a brief description here.

Description inserted by Dominik Auerbach on Thu, 08 Feb 2007 13:53 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back