| 
                    
                    
                     
                     |   |  
                        | Date Reported: 9th November 2009  | Risk Level: MEDIUM  |  | 
              
                |  | 
              
                |  | 
              
                |  | 
              
                |  | 
              
              
                | Email Subject:  | Bank of America: Online Access Restricted | 
              
              
                |  | 
              
                | Apparent Sender:  | Bank of America Alert  | 
              
                |  | 
              
                | Return Address:  | onlinebanking@ealerts.bankofamerica.com  | 
              
                |  | 
              
                | Email Format: | HTML  | 
              
                |  | 
              
                | URL of Web Content:  | http://www.kongprofile.org/bankofamerica=onlineset .bankofamerica.bofasitekey3onlineprofileupdate.use
 rIDsitekeychanllenge=Signonuser/index.html
 
  | 
              
                |  | 
			  
			    
                | Anchor text of URLs:  | 1) Sign In ยป, 2) onlinebanking@ealerts...
Online Access
 Suspension Message
 Date:
11/07/2009
Your Online
 Banking Access was suspended on 11/06/2009.
 During regular system maintenance your
 online account has been flagged and we must
 confirm that you are the true holder of this
 account. Account was flagged during scheduled
 system update on 11/06/2009 and as a security
 measure some sensitive account features were
 automatically disabled. Below are the
 possible reasons that determine the
 maintenance system to flag an account:
-Too
 many unsuccesfull login attempts
 detected.
-Customer is not enrolled with Bank
 of America Online Banking.
-Your did not
 login into your Online Banking account in the
 last month.
To restore access to your account
 or enroll with Bank of America please follow
 the link below:
Acess My Account, 3)
 www.bankofamerica.com
  | 
              
                |  | 
              
                | Location:  | Location not available  | 
			  
		
                |  | 
              
              
                | Scam number: | 5607-75702-280749 | 
         
              
              
                |  | 
              
                | Comments: | Email asks you to confirm/update/verify your account data at Bank of America Alert  by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.
 
 Bank of America Alert  never send their users emails requesting personal details in this way.
 
 The anchor text appears as a legitimate URL, but don't be fooled - clicking on it will take you to a phishing site!
 
 The spoof website this email links to was not online at time of this report, but variations of the scam which link to working websites are bound to exist, so be wary! The website may have been taken down or disabled by the hosts, but quite often these websites are hosted on the personal computer of the phishers, so may only be online at certain times.
 
 | 
              
                |  |  |  | 
              
                |  | 
              
                |  | 
              
                |  | 
              
                | 				
				
		  
			  
			  
 | 
              
                |  | 
              
                | 11/07/2009
 Your Online Banking Access was suspended on
 11/06/2009.
 
 During regular system maintenance your
 online account has been flagged and we must
 confirm that you are the true
 holder of this account. Account was flagged
 during scheduled system update on 11/06/2009
 and as a security measure some
 sensitive account features were automatically
 disabled. Below are the possible reasons that
 determine the maintenance
 system to flag an account:
 -TOO MANY UNSUCCESFULL LO...
 
 
 | 
              
                | 
 | 
              
                |  Click for full size image
 | 
              
                |  | 
              
                | Website: |  |  | 
              
                |  | 
              
                |  | 
              
                | Website was not online when we checked. It returned the error 404 |