New phishing attempt targets bank customers

Many people are wondering what to do now that their bank has been acquired in the wake of the lending crisis. Well, whatever you do, don't click on links in e-mails purportedly sent by your bank.

Security firm SonicWall said Thursday that it has been seeing e-mails that attempt to lure people to fake bank Web sites, where they are asked to re-verify their personal and bank information as part of a merger.

In one example that targets people affected by the Chase acquisition of Washington Mutual, the e-mail asks recipients to click on a link and confirm their identity so Chase can "activate new security features for our new and old online banking customers."

The link goes to a fake Chase Web site that asks for account log-in and other information, said Andrew Klein, a product manager at SonicWall. The scammers are gathering the information to sell to cybercriminals who will use it to transfer money out of victims' accounts or commit identity fraud, he said.

"Banks wouldn't do this online," Klein told CNET News. "Traditionally, what happens is you get a letter in the mail."

Phishers and scammers commonly exploit news events to lure victims to sites that contain malware or that ask them to supply information. Cybercriminals are even using Google Trends to find out what Web search terms are the most popular in order to make sure they have timely and relevant content on their sites with which to attract victims.

But this particular type of phishing attempt is particularly dangerous given how confused many consumers are about what the bank acquisitions will mean for them.

To test your knowledge of phishing and spam, try taking this SonicWall quiz.

This phishing attempt tries to get people affected by the Chase-Washington Mutual merger to give up their bank account information.

(Credit: SonicWall)

[Solaris_User]

New phishing attempt targets bank customers: It's called the United States Congress.

Don't worry about ID thieves.. we will take your money before they do.

[anguyen41]

Thank you for this information.

[qi-fense]

We can also track email traffic on a variety of financial institutions - we have seen 5 specific attacks on citi, wachovia and wells fargo in the past 3 days - these generated many 100's of thousands of emails being sent from over 100 diferent IP addresses based in over 35 countries - again, all of this traffic stemmed from only 5 coordinated attacks.

Phishers like to strike at the most fearful and the most vulnerable. To the initiated, most of these emails are pathetic - but with those kinds of numbers, they are likely to catch a few of us unaware.

[Identity-Theft-Experts]

Identity Theft Experts agree there is no complete solution for uninformed users who are constantly hooked by these scams. The fact is even well educated savvy people are scammed every day. Numerous tools incorporated into browsers and email programs will help stem the tide. But continually informing the public via articles like this in the mainstream is essential. www.IDTheftSecurity.com