E-Mail hoax targets First Union customers

Friday, 9 May 2003, 8:05 AM EST

A hoax e-mail purporting to come from First Union Bank and attempting to dupe recipients to visit a malicious Web site is making the rounds on the Internet.

The mail arrives from an address at Firstunion.com and informs the recipient that the bank has lost the recipient's online banking username and password. It directs users to a Web site where they are encouraged to enter their usernames and passwords, which are presumably then collected for later use by the scam artist who created the e-mail.

The e-mail arrives from the address bankaccount@wachovia.com and bank officials say they're unsure exactly how the sender was able to forge the address. Nor have they discovered how the attacker got a list of the bank's customers' e-mail addresses.

Even if users don't enter their personal information in the form at the site, they could still be at risk. Simply visiting the site triggers an automatic download of the Backdoor-AMQ Trojan horse program to the visitor's machine, according to an advisory published Thursday by the Unified Incident Reporting and Alert Scheme, the U.K. equivalent of the CERT Coordination Center.

[ Read more ]

Related items


Patching: The least understood line of defense

Posted on 29 August 2014.  |  How many end users, indeed how many IT pros, truly get patching? Sure, many of us see Windows install updates when we shut down our PC and think all is well. Itís not.

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.


Tue, Sep 2nd