Search our Spoof Library...
Another Spoof Email and Phishing Scam report by MillerSmiles.co.uk - click this image to go to our home page.

Online banking issue or Internet Banking Issue (US Bank)
20th May 2004

please forward any scams you've received to spoof@millersmiles.co.uk

Report Summary
Date Reported
first reported 26th April 2004
Apparent Sender
US Bank
Return Address
U.S. Bank National Association <service@usbank.com>
Subject
Online banking issue OR Internet Banking Issue
Format
HTML
Method
disguised link leads to bogus web content - submitted form data is captured by a local script
Bogus Web Content?
Yes
URL of web content

http://210.118.170.142/swf/ OR http://61.221.243.26/www/
these pages are scripted to forward your browser to another address and to exploit the URL spoofing vulnerability which exists in unpatched Internet Explorer browsers (test your browser for URL Spoofing vulnerability). The latest reports included a link to http://66.6.105.29/backtick/cuscat/client_system/cgi/ which resolves to a different US web hosting service, http://196.38.110.111/www/which resolves to a US web hosting service, and http://203.131.68.250/www/ which resolves to web space in the Philippines.

RISK LEVEL
Medium
WARNINGS

1. Note the URLs - nothing like a genuine US Bank URL.
2. Pages are scripted to open remote content while exploiting the URL Spoofing (canonicalisation) vulnerability in unpatch IE browsers - unpatched browsers will erroneously show http://www.usbank.com in the address bar.
3. Be aware that a number of differing URLs are in use in this phishing scam.
4. Recipients of this email may notice that the date of the email is vastly incorrect- between the 14th and 16th January 2004

 

" Dear U.S. Bank valued member, Due to concerns, for the safety and integrity of the online banking community we have issued this warning message. "...

 

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

 

The Spoof Email ...

Dear U.S. Bank valued member,

Due to concerns, for the safety and integrity of the online
banking community we have issued this warning message.

It has come to our attention that your account information needs
to be updated due to inactive members, frauds and spoof reports.
If you could please take 5-10 minutes out of your online experience and renew
your records you will not run into any future problems with the online service.
However, failure to update your records will result in account suspension.
This notification expires on April 29, 2004.

Once you have updated your account records your internet banking
service will not be interrupted and will continue as normal.

Please follow the link below
and renew your account information.

U.S. Bank Internet Banking

 

The forged web page ...

Online banking issue (US Bank)

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...
Subscribe

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the MillerSmiles.co.uk web site.

Click the arrow to return to previous page

Home

Guides...

Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide