Security Alert: Phishing Attacks
ABCO has learned of two recent phishing attacks that we'd like to make members aware of. Phishing attacks use e-mail or malicious websites to solicit personal information by posing as a trustworthy organization. Attackers may send e-mails seemingly from a reputable credit card company or financial institution that requests account information, often suggesting that there is a problem. When users respond with the requested information, attackers can use it to gain access to the accounts.
The first attack involves perpetrators targeting to steal account log-in credentials of millions of members of financial institutions like ABCO, who use First Data Merchant Services for ATM/Debit card transaction processing.
In this case, the emails in question purport to be First Data system communications and direct recipients to a fraudulent website with the First Data logo. Below is an example of an e-mail received:
Example 1:
"From: FIRST DATA [mailto:gateway-support@secure-linkpt-firstdata.com]
Sent: Tuesday, July 13, 2010 9:05 AM
To:
Subject: FDMS ALERT
Dear First Data Merchant Solutions Customer,
Your account is locked due to unusual activity.
Please click to verify your online information, and unlock it."
In short, if you receive any e-mail from First Data Merchant Services, do not open it. Delete it immediately.
The second attack involves ACH, a popular debit and credit transaction processing company. They have received reports that individuals and/or companies have received a fraudulent e-mail that has the appearance of having been sent from ACH. See sample below:
"= = = = = Sample E-mail = = = = = =
From: Information
Sent: Thursday, July 22, 2010 8:27 AM
To: Doe, John
Unauthorized ACH Transaction
The ACH transaction, recently initiated from your bank account, was rejected by the Electronic Payments Association. Please review the transaction report by clicking the link below:
Unauthorized ACH Transaction Report"
The subject line of the e-mail states: Unauthorized ACH Transaction. The e-mail includes a link that redirects the individual to a fake Web page and contains a link which is almost certainly an executable virus with malware. Do not click on the link. Both the e-mail and the related website are fraudulent.
First Data and ACH are working tirelessly with various hosting entities, domain registrars, and law enforcement agencies to eliminate these fraudulent websites and apprehend the perpetrators of these phishing attacks.
If you have further questions, feel free to contact Member Care at 1-800-225-1859.
