JaBbA's Hut

I received another phishing attempt this weekend. This one is interesting for a couple of reasons:

- The English isn't perfect (within the nearest time)
- It attempts to use the fear of fraud to perpetrate fraud.
- Odessa Ayala? I'm trying to figure out why the fraudster didn't use a name like "William Smith". Maybe I shouldn't give them ideas.
- When you hover over the link in IE and Notes, it shows you "https://www.citibank.com...". When you hover over it in Mozilla/Thunderbird, you see the actual "http://61.128.198.62/verify/". This is because it attacks an IE bug within the URL.

(I forwarded the message to a Notes account to see what would happen with the link)

A JaBbA round of applause to Citbank. Although they haven't yet seen the email, I was able to get to a form to report fraud in 2 clicks on their site, and once I submitted the email, they gave me a phone number to call in big red letters that said "If you have given out any personal information or responded in any way, call right away." 2 weeks ago, it took me over an hour to get ahold of someone at Houshold Bank.