Maybank2U Phishing Steals Your TAC

< Maybank2U Phishing | Microsoft is Rewarding $250k for Finding Who is Behind Downadup Worm >

Friday, February 13. 2009

(Posted by Mel Mudin)

Here's a recent screenshot of a Maybank2U phishing site:

The URL is http://www.private-message-m2u.com/M2ULogin.htm, which is not detected as a phishing site by Firefox. After you key in your username and password, it will prompt this page:

The URL is http://www.private-message-m2u.com/Process.html

This page asks for your TAC number. The way this works is pretty straightforward. You key in your username and password, and the phisher either programatically or manually logs in to the real Maybank2U website and perform a fund transfer and requests for a TAC.
All they need is to wait for you to enter the TAC into the fake website.

So what happens after you entered the TAC?

The URL is http://www.private-message-m2u.com/Final.html. As you can see, it asks you not to access online banking till 5:20pm today. How convenient. By that time, all your money are belongs to the phishers.

Posted by Mel Mudin at 09:26 | Comments (5) | Trackbacks (0)

Defined tags for this entry: maybank, maybank2u, phishing, phishing site

1599 hits

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

Hi Mel Mudin,
we like your efforts in sharing & commenting on IT Security topics happen in M'sia Govt & private landscape. How to reach you better ?

rgrds
James
jamesdp21@gmail.com

#1 james on 2009-02-22 22:42 (Reply)

Sorry, Miss out . should be Private Sectors in the above sentences.

#2 james on 2009-02-22 22:44 (Reply)

FTW!

#3 RuFI0 on 2009-02-24 18:36 (Reply)

Ni si James ni bukan consultant Maybank ke?

Tak pasal2 leh kena tangkap ni.

#4 Kuda kayu on 2009-02-25 11:23 (Reply)

I oso gt ("http://96.57.28.58/img/maybank2u/common/")
It's say Public bank kena DDOS n ask us 2 do sumthing.
den, get de pin from ori website n log in thru their SECURE server..

#5 Anonymous on 2009-02-27 17:28 (Reply)

Add Comment

Before you post a comment, please take note of the following guidelines:

Commenting is provided as a courtesy only.
Please be brief and relevant to the post.
Please be polite even in disagreement with us or others.
Support claims you wish to make using sources and links.
No personal attacks, name calling, or commercial commenting.
Anyone creating false or multiple identities will be banned.
If you don't have a cogent argument, you will be censored.
If you are purposefully deceptive, you will be censored.
No spamming or flooding.

We appreciate your time and effort in contributing to security.org.my
Comment policy copied and modified from Spin Hunters.

Name
Email
Homepage
In reply to
Comment	Enclosing asterisks marks text as bold (word), underscore are made via _word_. Standard emoticons like :-) and ;-) are converted to images.
	Remember Information? Subscribe to this entry

DISCLAIMER

All data and information provided on this site is for informational purposes and on an *as-is* basis.

This weblog does not represent the thoughts, intentions, plans or strategies of our employers. It is solely our opinion and views as security professionals.

Feel free to challenge us, disagree with us, or even tell us that we are a complete mindless and brainless monkeys in the comment section of the blog entry.

Report Defacements of Malaysian Website

Report web defacements so that we all can keep track of them! Information here. You can view the reported defacements here.

Maybank2U Phishing Steals Your TAC

Computer and Network Security, Mamak Style

Friday, February 13. 2009

Maybank2U Phishing Steals Your TAC

DISCLAIMER

Report Defacements of Malaysian Website

Tags

Recent Entries

Archives

Syndicate This Blog

Creative Commons