Different versions of ABN AMRO phishing email in circulation


MX Lab, http://www.mxlab.eu, detected different versions of ABN AMRO phishing emails that are in circulation on a daily base targeting Dutch ABN AMRO bank account users.

ABN AMRO Systeembeveiliging

The first variant, with a very good lay out and style, comes with the subject “ABN AMRO Systeembeveiliging” or “ABN AMRO Systeembeveiling” and is sent from the spoofed email address “ABN AMRO NV <customercare@abnamro.nl>”.

This will redirect you to hxxp://www.clumber.net/abnamro/abn.html.

When filling in al the details a redirect to the real ABN Amro is executed.

Belangrijk bericht van ABN AMRO Bank

The second variant comes with the subject “Belangrijk bericht van ABN AMRO Bank” and is sent from the spoofed email address “ABN AMRO Bank <klant.services@abnamro.nl>”.

Beveiliging Message Alert van ABN AMRO Bank

Another variant comes with the subject “Beveiliging Message Alert van ABN AMRO Bank” and is sent from the spoofed email address “ABN AMRO BANK <customer.services@abnamro.nl>”.

Installatie mijn ABN AMRO Bank

This one comes with the subject “Installatie mijn ABN AMRO Bank” and is sent from a random spoofed email address.

This one will redirect you to hxxp://70.38.120.162/~abnsecbk/secure/.

ABN-AMRO BANK

This last one comes with the subject “Belangrijk Nieuws Mijn ABN-AMRO Bank” and is sent from a random spoofed email address.

One Response to Different versions of ABN AMRO phishing email in circulation

  1. erik blommestein says:

    I received another one but have been unable to forward it because of a poorly designed contact system at ABN-AMRO

Follow

Get every new post delivered to your Inbox.

Join 341 other followers

%d bloggers like this: