New Bank of America Phishing Scheme Abuses Legit Websites

Security researchers from Web security provider ScanSafe, which is now a subsidiary of Cisco, warn that the latest phishing scam targeting Bank of America customers is leveraging compromised legit websites. The technique is an attempt to evade reputation filters. The rogue email message is properly spelled and well formulated. It attempts to trick potential victims by claiming that their bank account is locked due to repeated failed authentication attempts. Additionally, it threatens users that if they don't verify their account information by filling in a form, the account will be suspended indefinitely. Posted in: Account Takeover Identity Theft ACH and Wire Fraud