Regions Bank 17 - Phishing

See also

Summary

Full description

Target:	Regions Bank
Date discovered:	18/11/2007

General The goal is to get the following information:
    • Bank account
    • Credit card
    • Personal data

Phishing method:
    • URL link

Email Details From: service@regionsnet.com
Subject: Dear Regions Bank member,

Visible link: https://secure.regionsnet.com/EBanking/logon/index.php?=default
Actual link: http://www.realtimeworlds.com/admin/assets/inf/redirect.htm
IP address: 87.117.199.142

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: http://www.northwoods.org/assetmanager/assets/info/regions-bank-...
Actual URL: http://www.northwoods.org/assetmanager/assets/info/regions-bank-...
IP address: 64.246.32.104

The phishing page will look like the following:

See a brief description here.

Description inserted by Dominik Auerbach on Sun, 18 Nov 2007 17:56 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back