A phishing campaign targeting German Deutsche Bank customers uses a fake “PhotoTAN” activation page to steal login credentials and authorize unauthorized transactions [1]. The attack, often delivered via phishing emails or SMS, directs users to a high-fidelity clone of the bank’s portal, requesting branch codes, account numbers, PINs, and QR code scans. Target: Customers of …
Category Archives: Bank phishing
La Banque Postale phishing page revealed
A sophisticated phishing campaign targeting La Banque Postale customers in France uses a fake “Certicode Plus” security update to bypass two-factor authentication. Scammers use smishing and phishing to steal credentials and register their own devices, granting full access to victims’ accounts. Target: Customers of La Banque Postale (France)Threat Level: Critical (Mobile Authentication & Funds Theft)Phishing …
Bank of America fake verification page detected
A Bank of America phishing campaign utilizes a multi-stage “identity verification” process to harvest full user credentials, including Social Security numbers, card details, and email passwords. Scammers use high-pressure SMS and emails directing users to fake sites designed to steal full identities rather than just login credentials. Target: Bank of America Customers (USA)Threat Level: Critical …
Continue reading “Bank of America fake verification page detected”
United Overseas Bank Limited (UOB) phishing page revealed
A high-fidelity phishing campaign targeting United Overseas Bank (UOB) users in Southeast Asia utilizes fraudulent SMS and email links to harvest login credentials and SMS OTPs through cloned websites. These sites, often using lookalike domains like “uob-security-update.com,” aim to steal credentials and authorize fraudulent transactions by mimicking the UOB TMRW app or web portal. The …
Continue reading “United Overseas Bank Limited (UOB) phishing page revealed”
HSBC bank phishing page detected
A phishing campaign targeting HSBC Bank customers uses a fake “Secure Key” synchronization alert to steal login credentials and real-time, six-digit security codes. This sophisticated attack mimics official security procedures to bypass multi-factor authentication, directing victims to fraudulent, lookalike domains. Target: HSBC Bank Customers (Global / UK / Hong Kong)Threat Level: Critical (Physical & Digital …
Fake Vehicle tax renewal page detected
Scammers are targeting UK drivers with a fake DVLA vehicle tax renewal phishing campaign designed to steal personal and financial details. The attack uses urgent SMS or email messages to drive victims to a convincing, counterfeit GOV.UK site that demands payment and sensitive security information to avoid bogus fines. To stay safe, ignore unexpected notifications, …
TFBank phishing page detected
A phishing campaign targeting TF Bank customers in Germany, Austria, and Scandinavia uses “security update” phishing emails and SMS to harvest login credentials and real-time OTPs. The attack, often involving fake “Meine Karte” portals, aims to steal personal data and access credit lines by mimicking legitimate brand identity Target: TF Bank Customers (Germany, Austria, Sweden, …
Fake Refund of your personal income tax (Erstattung Ihrer persönlichen Einkommensteuer) with bank phishing revealed
A phishing campaign impersonating German tax authorities (Finanzamt/ELSTER) is targeting taxpayers with fraudulent “Erstattung Ihrer persönlichen Einkommensteuer” (Income Tax Refund) emails and SMS, directing them to a fake portal designed to steal banking credentials (PINs/TANs). The attack uses a “Multi-Bank” approach, presenting a list of major German banks to intercept credentials in real-time, often using …
RWE (Rheinisch-WestfÀlisches ElektrizitÀtswerk) fake page with bank phishing detected
A phishing campaign targeting RWE AG customers in Germany uses fake energy refund emails to steal sensitive personal and financial data, including online banking credentials, via a fraudulent portal. The scam pressures users with urgent deadlines to claim a “refund for overpaid electricity costs” and directs them to malicious domains, such as kunden-rwe.net, to enter …
One Nevada Credit Union phishing page detected
A phishing campaign impersonating One Nevada Credit Union targets members via SMS and email, aiming to harvest login credentials, security answers, and sensitive personal information like SSNs through a cloned, fraudulent portal. Attackers exploit regional brand trust to create urgency around “security verification,” targeting the legitimate onenevada.org domain with sophisticated lookalike URLs. To protect against …
Continue reading “One Nevada Credit Union phishing page detected”