Sunday, April 20, 2014

beware: well crafted phishing attack: Fwd: Know Your Customer (KYC) Update Required


i was taken in by this phishing attack. i didn't pay attention, so i entered data into the fake web address given below (it was not https which i didn't realize till later). so i ended up having to change all my passwords on this site. 

the embedded site address is the key. the bank will never send an embedded address, but will ask you to type in www.onlinesbi.com 

beware! i think i realized my mistake soon enough -- i called customer service to complain, and when i was talking to them realized there was a problem. i had to cancel by ATM card, though. 

thanks
rajeev

---------- Forwarded message ----------
From: State Bank. of India <noreply@onlinesbi.com>
Date: Sat, Apr 19, 2014 at 11:53 AM
Subject: Know Your Customer (KYC) Update Required
To: <my id>


Dear Valued Customer,

At SBI, we're serious about protecting your personal information. We use a variety methods to make sure your details are safe, using Secure Socket Layer (SSL) encryption for all your online transactions and whenever you log in your User ID and Password .We also want as much help as our customers can give us in protecting themselves and steps you can take to help lower the risk of unauthorized activity on your account.

Reserve Bank has directed banks to ensure that all accounts opened with them are compliant with the KYC (Know Your Customer) norms.We are required to obtain from customers necessary proof of their identity. Further, we are required to update these records as per the prescribed periodicity. In view of this, every customers are required to re-confirm proof of account.The aforesaid update are required in the case of every State bank of India account holders.

Your online safety is our shared responsibility. This update will help us protect your personal information and help shield yourself from account activity you didn't authorize especially from unknown IP we are not familiar with.Any information we send you is scrambled en route and decoded once it reaches your browser.

Please log on to verify your account, by clicking the link below

www.onlinesbi.com


NOTE: If the requisite proof update is not made on your account, we reserve the right to close your account without further notice. We apologies for any inconvenience. This message is purely as a result of our determination to provide you with the best possible security.


We appreciate your business.

Sincerely,
State Bank of India Team.




--
thanks
rajeev

sent from samsung galaxy note, so please excuse brevity



--
thanks
rajeev

sent from samsung galaxy note, so please excuse brevity



--
sent from samsung galaxy note, so please excuse brevity

No comments: