Phishing email again

I am getting phishing email again (previous phishing email), this time the email is faking CIMB bank. See print screens after the jump:
Print screen from my gmail, even they fake the sender to be called clicks@cimb.com.my. People that being panic would click to the link and give out they confidential information.

I want to see how do they fake the website, but FireFox already block it, nice work FireFox!

Too bad this website already being reported to authority and it has been suspended, otherwise I can print screen the fake CIMB website.


People, please be careful. Do not response to any of the email the requesting us to key in our account id/name and password. Please call to bank to confirm such request, and also do not call to the phone number listed in the email, they will fake a bank call center to trick us to give the information they wanted. Just google the real bank website and find the phone number and call. If still in doubt, just call the authority.


Hope you will enjoy this post, subscribe to my RSS or mailing list or follow me on blogger or twitter. :)
source: me

Phishing email

Today I got an email in my Gmail spam box with sender name "Maybank" (one of the online banking I use) and title "You have 1 new security alert". Sender with this email "jamfiddl@aol.com". I know what is a phishing email, but out of curiosity, I went to click on the link.

It looks like exactly the real MaybanktoU.com! I went on to fill in some bogus information, WAHAHAHAHA, the fler should get some surprise today. :P

the link: http://cyberconceptsng.com/libraries/geshi/M2ulogin.do/Access.htm

Please educate your family or friends or even strangers, do not response to email from bank unless you verified with the bank. Do not call the phone number in the email as well, they probably setup it so that they can fools you. Call to the bank real number, visit the official website of the bank.
Also if you find any of these phishing emails/links, please notify the bank.
For Maybank:
https://www.maybank2u.com.my/mbb/m2u/common/mbbPhishingReportForm.do
Let me know other banks' website for reporting phishing, I will add it here :)

Update:
I got a few more of the phishing sites:
http://www.odsvarme.dk/media/M2ulogin.do/Access.htm
http://empirestatemodelmariners.com//Members/M2ulogin.do/Access.htm
http://www.maybank2u.com.my.safeland.gr/mmb/m2u/common/M2ULogin.htm?action=Login
http://empirestatemodelmariners.com/faq/M2ulogin.do/Access.htm
http://www.ecchidreams.com/images/M2ulogin.do/Access.htm
http://www.tsurinews.co.jp/uploads/thumbs1/M2ulogin.do/Access.htm