A phishing campaign targeting Banco Sabadell users in Spain employs SMS and email, mimicking a security update to steal credentials and Digital Signature (Firma Digital) codes. The attack uses lookalike domains, such as sabadell-online-seguridad.net or acceso-bancosabadell.com, to redirect victims to a Man-in-the-Middle site designed to harvest login data and authorize fraudulent transfers in real-time. A …
Category Archives: Bank phishing
Crédit Mutuel de Bretagne (CMB) bank phishing page detected
Crédit Mutuel de Bretagne (CMB) “Security Key” PhishingTarget: Customers of Crédit Mutuel de Bretagne (France / Brittany region)Threat Level: Critical (Real-time Account Takeover & “Clé Digitale” Hijacking)Phishing Method DescriptionThis attack targets users of the CMB Online Banking and the “CMB suivi de compte” mobile app. Scammers use a “Security Alert” pretext, sending out Smishing (SMS) …
Continue reading “Crédit Mutuel de Bretagne (CMB) bank phishing page detected”
Raiffeisen bank phishing page detected
Raiffeisen Bank “Digital Security Update” PhishingTarget: Raiffeisen Bank Customers (Central and Eastern Europe)Threat Level: Critical (Raiffeisen Identity & Digital Token Theft)Phishing Method DescriptionThis attack targets users of the Raiffeisen Online Banking and the Digital ID apps. Scammers distribute urgent notifications via SMS (Smishing) or Email, claiming that “New Security Regulations” or a “System Maintenance” requires …
Bankinter phishing page in Portuguese revealed
Bankinter Portugal “Security Alert” PhishingTarget: Bankinter Customers in PortugalThreat Level: Critical (Real-time Account Takeover & SMS OTP Theft)Phishing Method DescriptionThis attack targets users of Bankinter Particulares (Online Banking). Scammers use a “Fraud Alert” pretext, sending out Smishing (SMS) messages claiming that an “unauthorized access” or “unusual purchase” has been detected. To “cancel” the transaction or …
Continue reading “Bankinter phishing page in Portuguese revealed”
OTP bank phishing page detected
OTP Bank “Account Access Verification” PhishingTarget: OTP Bank Customers (Hungary, Russia, Romania, Serbia, etc.)Threat Level: Critical (Real-time OTP Interception & Account Hijacking) Phishing Method DescriptionThis attack relies on Psychological Pressure. Victims receive a Smishing (SMS) or Email claiming that their “OTPdirekt access has been suspended” or that a “Suspicious login attempt” was detected from a …
Banco BISA phishing page detected
Banking Phishing – Fake Virtual Keyboard & Credential Harvesting This phishing page impersonates the online banking portal of Banco BISA (a Bolivian bank). The page is designed to steal customers’ login credentials by mimicking the bank’s legitimate authentication interface. How it works:The victim receives a phishing email, SMS, or other fraudulent message claiming there is …
Vipps phishing page in Norwegian detected
Vipps Payment Phishing – BankID Credential Theft This phishing page impersonates Vipps, a widely used mobile payment app in Norway. The page is designed to steal victims’ fødselsnummer (Norwegian national ID number) and subsequently their BankID credentials, which would allow attackers to take over bank accounts and authorize fraudulent transactions. How it works:The victim receives …
Continue reading “Vipps phishing page in Norwegian detected”
Banco De Oro phishing page detected
BDO Online Banking Phishing – Credential Harvesting This phishing page impersonates the login portal of BDO (Banco de Oro Unibank) , one of the largest banks in the Philippines. The page is designed to steal customers’ User ID and Password, giving attackers direct access to their bank accounts. How it works:The victim receives a phishing …
Česká pošta fake page detected
Česká Pošta Package Delivery Scam – Fake Redelivery Fee This phishing page impersonates Česká pošta (Czech Post) , the national postal service of the Czech Republic. The page is designed to trick victims into paying a small “confirmation fee” (1.99, presumably in euros or Czech koruna) under the guise of completing a package delivery. How …
Singapore Post fake page detected
Package Tracking Phishing – Credit Card Harvesting This phishing page impersonates a postal or courier service, likely targeting an international audience. The page claims to provide tracking information for a package (Tracking Number: SG904951986) while simultaneously requesting sensitive financial details under the guise of “pay by card.” How it works:The victim receives a phishing email …