ANZ Phishing Scams

Phishing scams, hijacking of TM accounts, keyloggers and all manner of other nasties. This is the place to report them and get help if you've been hit.
ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scam

Post by ionet » Wed Jul 09, 2014 5:35 am

_


ANZ Phishy received in 4 Jul 14:

From: ANZ Bank.
Subject Line: ANZ Bank Maintenance.


ANZ BANK MAINTENANCE




Due to scheduled maintenance this weekend Internet Banking, goMoney and Phone Banking services will be unavailable and we will need our customer to update their details by following the link below:


http://www .anz.co.nz/personal/update



Thank You.

Copyright 2014 ANZ Bank New Zealand Limited. All rights reserved.

ANZ Header image cropped


Scammer's Phishing Site


Be Careful - this Phishing Site may still be Live:

http://www .anz.co.nz/personal/update


http://www.ferisulianta.com/images/secu ... S/pgLogin/" onclick="window.open(this.href);return false;


M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

User avatar
digidog
Site Admin
Posts: 15014
Joined: Wed May 05, 2004 2:25 am
First Name: Alfie
Location: Otago
Contact:

Re: ANZ Phishing Scams

Post by digidog » Wed Dec 10, 2014 1:01 am

Here's a variation on the usual phishing scams. The bad guys tell you to download and install malware, then enter your pin number and password when prompted. Sheeeeesh!!!
anz-phish.png
10 December 2014
anz-phish.png (34.6 KiB) Viewed 1554 times
However they're not that smart and the malformed download link goes absolutely nowhere.
http://attachment+download/

User avatar
digidog
Site Admin
Posts: 15014
Joined: Wed May 05, 2004 2:25 am
First Name: Alfie
Location: Otago
Contact:

Re: ANZ Phishing Scams

Post by digidog » Wed Dec 10, 2014 2:00 am

Ha! They've just sent a copy to the admins on this site. That's clever! And they haven't noticed that their link is malformed either.

User avatar
Foggyone
Site Admin
Posts: 9880
Joined: Sat May 22, 2004 8:16 pm
First Name: Peter
Location: Lower Hutt
Contact:

Re: ANZ Phishing Scams

Post by Foggyone » Wed Dec 10, 2014 5:37 pm

This phish/trojan is probably based on one used against the Standard Bank, South Africa. This is based on the 0860 phone number. The crooks didn't take the trouble to change this to 0800.

The 64 11 299 4701 number is lifted from the Standard Bank contacts where it shows as 27 11 299 4701. In this instance the crooks have amended the country code.

The email support address ibsupport@anz.co.nz is based on the Standard Bank support address ibsupport@standardbank.co.za. Once again the crooks have taken some trouble to try and make the address look plausible.
Google, the answer to so many questions!
-----------------------------------------------------

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Sun Jan 18, 2015 12:57 am

---

Phishing Scam received 10 Jan 15
From: ANZ Online Banking
Subject: Service Upgrade Notice


Dear Client,



Complement of the season, We Invite you to kindly join our train of most happy customers this year 2015 by upgrading your ANZ Online

account against newest cyber malicious attack. ANZ employs various security measures to ensure that your transaction and personal

information is protected. Kindly login using our website below to upgrade to our new system technology.


www .anz. co. nz


We sincerely apologize for any inconvenience caused.

Thank you for choosing ANZ Bank.

Scammer's Phishing Site

Be Careful - this Phishing Site may still be Live:

http://silentsmajority.com/go/Anz/index.html



M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Sun Jan 18, 2015 1:08 am

--

Phishing Scam received 2 Jan 15


This has the standard ANZ Logo & rounded Blue & Black page structure
usually seen in ANZ IB communications - so could easily be mistaken for a
genuine communication from the bank

From: ANZ
Subject: ANZ: New Year Internet Banking Update


ANZ Message Notification

You have a new Internet banking message

Log on (Button)

Scammer's Phishing Site


Be Careful - this Phishing Site may still be Live:

http://boletininformativodemorelos.com/ ... index.html



M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Fri Jan 30, 2015 12:14 pm

_

ANZ Phishy received in 31 Jan 15:

From: ANZ Bank Limited
Subject: ANZ Security Alert



Dear Customer,

Kindly complete the verification process to avoid account suspension.

Click our our website below to continue

www .anz .co .nz


Thank you.
ANZ Bank New Zealand


Scammer's Phishing Site

Be Careful - this Phishing Site may still be Live:

http://massachusettsdumpsters.com/wp-ad ... /index.htm


M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Thu Feb 05, 2015 5:04 am

_


4 ANZ Phishies received in from Japanese mail servers on 05 Feb 15:


Be very alert to these ANZ Scam Messages
These all have the ANZ Blue / Black Rounded borders which look
like the Bank's new website format



ANZ Message Notification


Subject Lines:


You have an Important ANZ Message Notification.

ANZ: Internet Banking Service Notification

ANZ: Fast Pay Is Here




Scammer's Phishing Sites


Be Careful - these Phishing Site may still be Live:


www.educateyourbaby.com/secure/2/Anz/index.html

http://sonysugar.co.ke/br/13/Anz/index.html






M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

User avatar
Foggyone
Site Admin
Posts: 9880
Joined: Sat May 22, 2004 8:16 pm
First Name: Peter
Location: Lower Hutt
Contact:

Re: ANZ Phishing Scams

Post by Foggyone » Thu Feb 05, 2015 7:50 pm

Both the above have been disinfected.

Educate your baby has been taken off line completely.

All sweet at the sugar company.
Google, the answer to so many questions!
-----------------------------------------------------

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Tue Feb 10, 2015 8:27 am

_

ANZ Phishy received in from Japanese mail servers today:

Be very alert to these ANZ Scam Messages
These all have the ANZ Blue / Black Rounded borders which look
like the Bank's new website format




ANZ Message Notification

Subject Line: ANZ: Message Notification



Scammer's Phishing Site:


Be Careful - this Phishing Site may still be Live:


http://sonysugar.co.ke/br/8/Anz/index.html


(Cheeky beggars appear to have hacked the same site as above again - this is one of the sites hacked on 15th)



M
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

User avatar
Foggyone
Site Admin
Posts: 9880
Joined: Sat May 22, 2004 8:16 pm
First Name: Peter
Location: Lower Hutt
Contact:

Re: ANZ Phishing Scams

Post by Foggyone » Tue Feb 10, 2015 5:30 pm

Sony Sugar is a reinfection.

I see there are another 9 directories with ANZ logons in the site structure..

http://sonysugar.co.ke/br/
Index of /br

Parent Directory
0/
1/
10/
2/
3/
4/
5/
6/
7/
8/
9/
Anz/
Google, the answer to so many questions!
-----------------------------------------------------

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Tue Feb 17, 2015 12:36 am

_

ANZ Phish received this morning:

From: ANZ ONline Banking
Subject: Important Notice - Online Account Suspension


Dear Customer

We have temporarily place a restriction on your account due to failure to confirm your information, during our online identity verification.

This is a final warning and failure to adhere to this warning or entering incomplete information will lead to internet banking termination

To resolve now, follow our link below or visit our any branch near you with a copy of your drivers license to complete this verification.

h t t p: // www.anz .co .nz /resolve/

Warning: Enter all information completely as prompted as failure to adhere to this warning will result to internet banking deactivation

Yours Sincerely,
ANZ Online Banking


No ANZ Graphics with this Phish - just text


Scammer's Phishing Site:

Be Careful - this Phishing Site may still be Live:

http://jmp.com.pk/wp-admin/includes/redir-anz.php



M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Wed Feb 18, 2015 7:57 am

_


Phishing Scam received 18 Feb 15


This has the standard ANZ Logo & rounded Blue & Black page structure
usually seen in ANZ IB communications - so could easily be mistaken for a
genuine communication from the bank


From: ANZ
Subject: ANZ: Fast Pay Is Here



ANZ Message Notification

You have a new Internet banking message

Log on (Button)

Scammer's Phishing Site


Be Careful - this Phishing Site may still be Live:

http://pro-fas.cl/joomla/2/index.html


M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: ANZ Phishing Scams

Post by ionet » Sat Feb 21, 2015 12:45 am

_

ANZ Phish received 19 Feb 2015:


From: ANZ ONline Banking
Subject: Important Notice - Online Account Suspension



Dear Customer

We have temporarily place a restriction on your account due to failure to confirm your information, during our online identity verification.

This is a final warning and failure to adhere to this warning or entering incomplete information will lead to internet banking termination

To resolve now, follow our link below or visit our any branch near you with a copy of your drivers license to complete this verification.

h t t p: // w w w . anz .co .nz /resolve

Warning: Enter all information completely as prompted as failure to adhere to this warning will result to internet banking deactivation

Yours Sincerely,
ANZ Online Banking

No ANZ Graphics with this Phish - just text


Scammer's Phishing Site:


Be Careful - this Phishing Site may still be Live:


http://www.agrovet.in/assets/js/redir-anz.php




M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

User avatar
Foggyone
Site Admin
Posts: 9880
Joined: Sat May 22, 2004 8:16 pm
First Name: Peter
Location: Lower Hutt
Contact:

Re: ANZ Phishing Scams

Post by Foggyone » Sat Feb 21, 2015 5:23 pm

The file appears to have been stripped from the site which still allows viewing of file structure.

ionet you are still receiving these. I haven't seen one in my email for years so I guess the crooks have taken me off their list, or my ISP's spam filter must be catching them.
Google, the answer to so many questions!
-----------------------------------------------------

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest