Indian Rock

24 hours in Oakhurst (photos by Jim Hsu).

US Bank Phishing

A fraudulent email in my Inbox:

Dear U.S. Bank valued member,

Due to concerns, for the safety and integrity of the Internet Banking community we have issued this warning message.

It has come to our attention that your account information needs to be updated due to inactive accounts, frauds and spoof reports. If you could please take 5-10 minutes out of your online experience and renew your records you will not run into any future problems with the online service. However, failure to update your records will result in account deletation.

Once you have updated your account records your online banking account will not be interrupted and will continue as normal. Please follow the link below and renew your account information.

U.S. Bank Internet Banking

I liked the threat of "account deletation." It's perhaps the only misstep in the body of the email text.

The email concludes with the seemingly legitimate URL

http://www.usbank.com/cgi_w/cfm/personal/account_access/account_access.cfm

But clicking on it takes you instead to this bogus page (image), with actual URL

http://www.id-centers.com/internetBanking/RequestRouter/DisplayLoginPage/index.html

which is an attractively composed work of online forgery that even includes a simulacrum of a browser SSL lock icon:

I thought the "id-centers.com" domain sounded pretty good too. I checked it out via WHOIS and had the following registration information returned to me:

Registrant:
Stephanie Sutton (92CWJ)
sales@foot-express.com
Wutworx
3505 Mildred Drive
Louisville, KY 40216
United States
Phone: (502) 290-9532