Kiwibank phishing scams

Phishing scams, hijacking of TM accounts, keyloggers and all manner of other nasties. This is the place to report them and get help if you've been hit.
ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Mon Apr 23, 2012 11:48 pm

_

And another received 23 April:

Subject line: account message


As a result of too many incorrect attempts to access and Sign-in failures.

Your Kiwibank Online banking has been terminated. Restore your account below:

https://www.ib.kiwibank.co.nz/" onclick="window.open(this.href);return false;



Kiwibank New Zealand. All rights reserved.

Be careful - The Phishing site could still be live:

http://www.letsplaygames.pl/LPB/wp-incl ... /index.htm" onclick="window.open(this.href);return false;


M
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

User avatar
digidog
Site Admin
Posts: 15014
Joined: Wed May 05, 2004 2:25 am
First Name: Alfie
Location: Otago
Contact:

Re: Kiwibank phishing scams

Post by digidog » Fri Apr 27, 2012 3:59 am

And another...

Careful: Live phishing site
http://www.pulpandpaperportal.com//wp-c ... i/kiwi.htm" onclick="window.open(this.href);return false; (27 April)

User avatar
Foggyone
Site Admin
Posts: 9880
Joined: Sat May 22, 2004 8:16 pm
First Name: Peter
Location: Lower Hutt
Contact:

Re: Kiwibank phishing scams

Post by Foggyone » Fri Apr 27, 2012 8:43 am

Just phishing for log in credentials and secret questions. Then it drops you to the bank logout acknowledgement page.

The page is being flagged by firefox as bogus, but is still operational by older browsers.
Google, the answer to so many questions!
-----------------------------------------------------

User avatar
digidog
Site Admin
Posts: 15014
Joined: Wed May 05, 2004 2:25 am
First Name: Alfie
Location: Otago
Contact:

Re: Kiwibank phishing scams

Post by digidog » Thu May 03, 2012 11:25 pm

Another illiterate phishing email...
Your online banking profile has been disable due to security reason.
Careful: Live phishing site
http://sg4life.net/index/kiwi/kiwi.htm" onclick="window.open(this.href);return false;

Referred via http://www.kadirablak.com//css.php" onclick="window.open(this.href);return false;

User avatar
Foggyone
Site Admin
Posts: 9880
Joined: Sat May 22, 2004 8:16 pm
First Name: Peter
Location: Lower Hutt
Contact:

Re: Kiwibank phishing scams

Post by Foggyone » Fri May 04, 2012 2:43 am

Flagged as a web forgery in Firefox, but the site is still live.

Looks like others I have seen.
Google, the answer to so many questions!
-----------------------------------------------------

User avatar
digidog
Site Admin
Posts: 15014
Joined: Wed May 05, 2004 2:25 am
First Name: Alfie
Location: Otago
Contact:

Re: Kiwibank phishing scams

Post by digidog » Fri May 11, 2012 9:49 pm

Here's another semi-literate KiwiBank phish... I've received two copies so far this morning.
We recently experienced a virus attack on our database, which have caused error in the security details of some of our customers,
therefore making it unable for the secure word to be loaded. We therefore require all our customers to verify their details.

Dear Customer

Click on the link below to verify your details.

Careful: Live phishing site
http://www.nafkvamskogen.no//cgi-bin/kiwi/kiwi.htm" onclick="window.open(this.href);return false;
And some more...
http://www.fechida.cl//kiwi/kiwi/kiwi.htm" onclick="window.open(this.href);return false; (19 May)

http://www.mujeryfutbol.es/logs/kiwiban ... co.nz.html" onclick="window.open(this.href);return false; (20 June)

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Wed Dec 26, 2012 12:26 am

_

24.12.12:


Received: from server.ero-webhosting.nl ([109.237.208.174])

From: kiwibank (at) kiwibank . co . nz
Subject: account suspension


Your Kiwibank online has been temporary suspended.
To confirm your Kiwibank online account status please "LOGIN"
For your account security, you can unlock your Kiwibank account here: "https://www.ib.kiwibank.co.nz/"

Phishing Site Links:


Be careful - These Phishing sites could still be live:


LOGIN:

http://v098865.home.net.pl//wp-includes ... /index.htm" onclick="window.open(this.href);return false;

Kiwibank site link

http://dickybeach.info/wp/wp-includes/j ... /index.htm" onclick="window.open(this.href);return false;




M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Sun Jan 06, 2013 11:06 pm

_


This morning's phishing attempt:


From kiwibank (at) kiwibank co nz

Subject: account message

Please note that we have made new and important changes to your Kiwibank account.


Login to view new updates .


For your security, your Kiwibank online account has been locked.


Re-activate Your Account .




Phishing Site Links:


Be careful - These Phishing sites could still be live:

Login to view New Updates:

http://www.theterracechina.com/librarie ... ank.co.nz/" onclick="window.open(this.href);return false;

Re-activate Your Account:

http://www.cloturesentinelle.com/includ ... ank.co.nz/" onclick="window.open(this.href);return false;


M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Wed Jan 16, 2013 2:13 am

_

Phishing Scam attempt for 14 Jan 13:


Network message received from:

Received: from vl20478.dns-privadas.es ([185.2.130.5] helo=servidor.deculturas.es)

From: Kiwibank
Subject: transaction alert



You have a Kiwibank Internet Banking Account Alert.
To view, click on the "ACCOUNTS"
tab and then click on "Statements" to verify your transaction

Phishing Site Links:


Be careful - These Phishing sites could still be live:


"Accounts":


http://hrm.defusionsolutions.com/www.ib ... /index.htm" onclick="window.open(this.href);return false;


"Statements":


http://www.timetechnician.com/wp-admin/ ... /index.htm" onclick="window.open(this.href);return false;



M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Sat Apr 27, 2013 3:22 am

-

a lonely Kiwibank phishy effort from 25.4.13:

from: Kiwibank
Subject Line: account suspension

Your Kiwibank online has been temporary suspended.
To confirm your Kiwibank Internet banking account status please "LOGIN"

Be careful - These Phishing sites could still be live:


"LOGIN"

http://beautifuldresses.co/wp-admin/js/ ... /index.htm" onclick="window.open(this.href);return false;



M


_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Wed Nov 13, 2013 4:17 am

_

Received 12 Nov 2013:

From: Kiwibank
Subject Line: your account has been locked



Transaction ID: 0910062IKGYFESS

Our records indicate that your account has been locked, click Log on: https://www.ib.kiwibank.co.nz/" onclick="window.open(this.href);return false;.

2013 Kiwibank Online Banking.

Be careful - Phishing site could still be live:


https://www.ib.kiwibank.co.nz/.

Phishing site:

http://www.escdaily.com/wp-content/www. ... /index.htm" onclick="window.open(this.href);return false;


M



_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Sun Nov 17, 2013 10:46 pm

_


Received 17 Nov 2013:
From Kiwibank
Subject Line: account alert


An attempt to access your Kiwibank was denied. please "LOGIN" now.


Be careful - Phishing site could still be live:



"LOGIN"


Phishing site:

http://nerdcurioso.com.br/wp-admin/js/w ... /index.htm" onclick="window.open(this.href);return false;

M



_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

User avatar
Foggyone
Site Admin
Posts: 9880
Joined: Sat May 22, 2004 8:16 pm
First Name: Peter
Location: Lower Hutt
Contact:

Re: Kiwibank phishing scams

Post by Foggyone » Mon Nov 18, 2013 5:22 pm

Enter your Phone Banking PIN and Select Your Registered Kiwibank Security Questions with Their Corresponding Answers:

Phone Banking PIN:
Security Question 1:
Security Question Answer:
Security Question 2:
Security Question Answer:
Security Question 3:
Security Question Answer:
Security Question 4:
Security Question Answer:
Security Question 5:
Security Question Answer:
Security Question 6:
Security Question Answer:
Security Question 7:
Security Question Answer:
Then you are dropped back to Kiwibank.
Google, the answer to so many questions!
-----------------------------------------------------

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Thu Nov 21, 2013 2:21 am

_

Today's KB Phishing effort:


From: Kiwibank
Subject Line: account suspension


Your Kiwibank online has been temporary suspended.
To confirm your Kiwibank Internet banking account status please "LOGIN"

Phishing Site:


Be careful - Phishing site could still be live:

"LOGIN"

http://www.iss-international.it/trainin ... /index.htm" onclick="window.open(this.href);return false;




M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Kiwibank phishing scams

Post by ionet » Wed Jul 09, 2014 5:00 am

_


Today's Phishing attempt x2 :

From: Kiwibank
Subject Line: activate your account




Your Kiwibank Account Has Been Blocked
For your security, your Kiwibank account has been locked
due to inactivity or because of many failed login attempts.


Click Here to Re-activate your account

© 2014 Kiwibank Limited.

Phishing Site:


Be careful - Phishing site could still be live:


Click Here to Re-activate your account


http://dlslogistics.gr/libraries/phpgac ... /index.htm" onclick="window.open(this.href);return false;


M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest