What the hell is this?!

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Not quite a Newb Joined: 25 Jan 2009 Posts: 26

Well, I dont have any account at Commonwealth NetBank but they wrote me from [email protected] this.

Code:

Dear Commonwealth NetBank member,

You have added [email protected] as a new email address for your Commonwealth online Bank account.

If you did not authorize this change, check with family members and others who may have
access to your account first. If you still feel that an unauthorized person has changed
your email, submit the form attached to your email in order to keep your original email
and restore your Commonwealth Bank account.

Thank you for using Commonwealth NetBank!

Please do not reply to this email.
This mailbox is not monitored and you will not receive a response.

--------------------------------------------------------
© Commonwealth Bank of Australia 2009 ABN 48 123 123 124

They told - Do not reply. What is this? Is it scam or not?

Posted: Thu Apr 23, 2009 6:01 am

It mentions a form attached to the email. Was there anything attached? And if so did it ask you to email it to a different address?

Posted: Thu Apr 23, 2009 6:02 am

i would think the attached form has some sort of trojan in it.

I also think that it would be simpler to go to a different computer, log in to your banking and check what email addresses are linked to it.

ETA or just ring them up and ask them!

Posted: Thu Apr 23, 2009 6:46 am

^^^
Or a phishing attempt. Send out in bulk in the hope that a few will be received by customers of that bank.
The email address looks genuine, which means nothing. Easily spoofed.
Just delete it.

Posted: Thu Apr 23, 2009 7:31 am

There wasn't any link to a phishing site attached? They didn't have a form that automatically sends information when you click a submitbutton (html forms may do that) and asks for sensitive information?

Reply from a different address anyway?

Not quite a Newb Joined: 25 Jan 2009 Posts: 26

Yeah, I didn't open the attached file because it was <some_text>.pdf.html

Not quite a Newb Joined: 25 Jan 2009 Posts: 26

termikxs wrote:

Yeah, I didn't open the attached file because it was <some_text>.pdf.html

No links, no sumbit buttons, even no pictures.
Just attached file which looks suspicious.

419Eater is my life Joined: 27 Jan 2009 Posts: 479

You will be unable to assist them until they join the commonwealth by singing this charter and provide a video of the signing ceremony.

impostors will be shot at dawn

http://saveandromeda.com/allsystems/andromeda/mission_charter.htm
http://crwflags.com/fotw/flags/fic_andr.html#comm

Not quite a Newb Joined: 25 Jan 2009 Posts: 26

Hey, what about the link the email was sent from? I mean this one.

Code:

commbank.com.au

PS: Sorry for my english Confused

Posted: Thu Apr 23, 2009 12:46 pm

The OP sent me the file in question and I've had a safe look at it.

It is basically a html file, with one JavaScript document.write command in it, which uses escaped characters. When decoded, the command basically displays an entire webpage.

I'm not going to load the webpage into a browser, but from looking at it in a text editor, I can see that it has a form that asks for User Ids and Card Details (inc passwords and pins).

So I would say that it is a phishing email.

Not quite a Newb Joined: 25 Jan 2009 Posts: 26

No need to quote the post right above yours -- JMR

Ok thank you very much B8er (it means baiter?)