Anti-Phishing Blog


Tuesday, November 01, 2005

What you see isn't always what you get

This phishing email is a classic illustration of how what you see isn't always what you get. The link that shows in the email is
https://chaseonline.chase.com/colappmgr/colportal/prospect?_nfpb=true&_pageLabel=page_logonform
but the real link that's hidden (that it would actually go to) is:
http://chase.com.update-user1881.info -- Note that it only looks like a Chase address at first glance. It's not. It is a dot info domain that just happens to have chase as one of the words within it. It has nothing to do with the real financial institution.

Here it is:

Dear Customer,
Chase OnlineSM does everything we can to protect your security.
By following the tips below, you can help us protect your account
against fraudulent activity.
Chase OnlineSM will be temporarily unavailable from 12:00 a.m. on Sunday,
October 30 to 8:00 a.m. on Monday, October 31 due to a system upgrade.
We apologize for any inconvenience.
Your most recent Personal/Business checking account profile is now available
for an update via Chase OnlineSM. Please click on the link below.
You will be asked to enter your ATM Credit Card information.
https://chaseonline.chase.com/colappmgr/colportal/prospect?_nfpb=true&_pageLabel=page_logonform
Thank you,
Chase.com
Chase OnlineSM Account Access
Message Center : CHASE27941
Message Date : 29-10-2005
Customer ID : 22193CBO85
Please do not reply to this message.
© 2005 JPMorgan Chase & Co.

Credit Union Phish

Nice try. No cigar.

Dear First Credit Union Customer,

This is your official notification from First Credit Union that the service(s) listed below will be deactivated and deleted if not renewed immediately. Previous notifications have been sent to the AccessOnline Contact assigned to this account. As the Primary Contact, you must renew the service(s) listed below or it will be deactivated and deleted. Renew now
SERVICE : First Credit Union AccessOnline® with Bill Payment. EXPIRATION: November 2nd, 2005

Thank you,

First Credit Union Online Banking Support, N.A.

***************************************************************************** IMPORTANT CUSTOMER SUPPORT INFORMATION *****************************************************************************

Please do not reply to this message. For any inquiries, contact Customer Service.

Document Reference: (92051208).

First Credit Union, N.A. Member FDIC. Equal Housing Lender. Copyright © 2005 First Credit Union, N.A. All rights reserved.