Hacked Peruvian Government Servers are Sending Phishing Campaigns to Chase Bank Customers

Written by ax | Published 2020/02/25
Tech Story Tags: phishing | government | hacking | scams | email-security | email-attacks | data-breach | hackernoon-top-story | web-monetization

TLDR An email message was sent to a Gmail address I had not used with Chase online banking since 2014 or so. The email message instructs an unsuspecting user to "download the attached form" which is a plain HTML file mimicking real world Chase banking website. It then follows with additional prompts under the pretence of "identity verification" to procure additional information from the user, such as debit card number, address, social security number, drivers license number, PINs, and other vital pieces of information. This is likely one of the sources where attackers obtained email addresses of Chase customers from.via the TL;DR App

no story

Written by ax | Security Researcher, Engineer, Tech Columnist | https://hey.ax/
Published by HackerNoon on 2020/02/25