{"id":123,"date":"2007-01-12T07:08:49","date_gmt":"2007-01-12T15:08:49","guid":{"rendered":"http:\/\/www.scamdex.com\/ScamBlog\/?p=123"},"modified":"2007-01-12T07:08:49","modified_gmt":"2007-01-12T15:08:49","slug":"irish-bank-hit-by-undetectable-phishing-scam","status":"publish","type":"post","link":"https:\/\/scamdex.com\/ScamBlog\/2007\/01\/irish-bank-hit-by-undetectable-phishing-scam\/","title":{"rendered":"Irish Bank hit by ‘undetectable’ phishing scam"},"content":{"rendered":"

FRAUDSTERS<\/strong> are targeting Ireland\u00e2\u20ac\u2122s biggest bank, AIB<\/a>,\u00c2\u00a0 in a virtually undetectable internet scam<\/span>. The bank admits it does not know and cannot find out how many of its customers are affected by the fraud. <\/span><\/p>\n

If you have an account at AIB, click here for Important Information<\/a><\/strong>\"AIB<\/p>\n

Cheats have found a way of overcoming security measures on AIB\u00e2\u20ac\u2122s genuine website to fool customers into divulging their account details and passwords.<\/p>\n

They are infecting customers\u00e2\u20ac\u2122 computers with a \u00e2\u20ac\u0153parasite\u00e2\u20ac\u009d virus which activates the moment they visit AIB\u00e2\u20ac\u2122s secure internet banking site and go to the \u00e2\u20ac\u0153log-in\u00e2\u20ac\u009d page.<\/span><\/p>\n

t the log-in stage they are presented with a \u00e2\u20ac\u0153ghost\u00e2\u20ac\u009d AIB page asking them for their registration number, full security code, mobile phone number and credit card details.<\/p>\n

However, customers cannot immediately tell the page is bogus as the website address in their browser is exactly the same as AIB\u00e2\u20ac\u2122s security-assured website.
\n
\nThe only way they have of knowing the page is fake is if they are aware that AIB\u00e2\u20ac\u2122s standard log-in page never asks for PIN access codes in full.<\/p>\n

AIB, which is Ireland\u00e2\u20ac\u2122s biggest company, said only a few customers have reported noticing the scam, but said bosses could not find out how many were being targeted.
\n<\/span><\/p>\n

\"The
\nLast night consumer rights campaigners called for urgent action from AIB to publicise and tackle the \u00e2\u20ac\u0153breath-taking\u00e2\u20ac\u009d new scam.<\/p>\n

\u00e2\u20ac\u0153This fraud just shows the capability, determination and intellect of the people involved in the scam,\u00e2\u20ac\u009d said Mr Dermott Jewell of the Consumers\u00e2\u20ac\u2122 Association of Ireland.<\/p>\n

\u00e2\u20ac\u0153The banks are going to have to invest a significant amount of time and expertise to deal with this \u00e2\u20ac\u201d a simple warning to customers will not do.\u00e2\u20ac\u009d<\/p>\n

Customers were being increasingly encouraged to go online to do their banking and had to have confidence they were not being defrauded, he said.<\/p>\n

The \u00e2\u20ac\u0153ghost\u00e2\u20ac\u009d scam is a new form of the phishing con, which uses e-mails to trick consumers into visiting a bogus website to give over their bank details.<\/p>\n

Savvy customers can tell the \u00e2\u20ac\u0153phishing\u00e2\u20ac\u009d website is fake because the internet site\u00e2\u20ac\u2122s address differs from the normal one used by their bank and is often not a secure site.<\/p>\n

This new scam does not rely on email, but tricks customers by making them believe they are entering details onto a genuine site. Armed with customer\u00e2\u20ac\u2122s account details, passwords and credit card numbers, the fraudsters can log on to the genuine site and plunder the accounts of victims.<\/p>\n

AIB has yet to send out individual warning messages to internet customers, who occasionally get notices and messages from the bank once they log in.<\/p>\n

But customers visiting the bank\u00e2\u20ac\u2122s main website \u00e2\u20ac\u201d www.aib.ie \u00e2\u20ac\u201d can read the bank\u00e2\u20ac\u2122s warning about the scam and see an example of the \u00e2\u20ac\u0153ghost\u00e2\u20ac\u009d page. \u00e2\u20ac\u0153This is not an AIB screen: it is a fraudulent attempt to obtain your personal details,\u00e2\u20ac\u009d the warning read.<\/p>\n

\u00e2\u20ac\u0153The attempted fraud is caused by a virus which installs rogue software on a customer\u00e2\u20ac\u2122s computer and then presents a fraudulent screen asking for personal details. Only customers who have this virus on their computers will be affected.<\/p>\n

\u00e2\u20ac\u0153However, unfortunately, AIB cannot detect which customers have been affected.\u00e2\u20ac\u009d<\/p>\n

* Any AIB customer who spots a fake page is asked to telephone the bank on 1890 24 24 24.<\/p>\n

Net loss: how scam works<\/p>\n

<\/strong> * The scam works by infecting a customer\u00e2\u20ac\u2122s home or work computer with a virus while they are surfing the internet.<\/p>\n

* The virus installs hidden software that is triggers into life once the customer visits the log-in page on AIB\u00e2\u20ac\u2122s main website for internet banking.<\/p>\n

* The software superimposes a fake website over the genuine AIB website and tricks consumers into divulging their account details.<\/p>\n

* Savvy consumers have previously been able to spot similar scams by spotting that the address bar on their web-browser has sent them to a rogue page.<\/p>\n

* The new scam means the address in the browser stays the same as the genuine secure site, fooling consumers into thinking the bogus site is safe.<\/span><\/p>\n

<\/p>\n

<\/div>\n
\n