{"id":446,"date":"2007-06-27T01:32:00","date_gmt":"2007-06-27T07:32:00","guid":{"rendered":"http:\/\/royblumenthal.com\/wordpress\/?p=446"},"modified":"2007-06-27T01:32:00","modified_gmt":"2007-06-27T07:32:00","slug":"phishing-attack-purporting-to-come-from-absa-bank","status":"publish","type":"post","link":"https:\/\/royblumenthal.com\/wordpress\/phishing-attack-purporting-to-come-from-absa-bank\/","title":{"rendered":"Phishing attack &#8212; purporting to come from Absa bank"},"content":{"rendered":"<p><span style=\"font-style: italic;\">Click this pic for a clear view of the text:<\/span><\/p>\n<p><a onblur=\"try {parent.deselectBloggerImageGracefully();} catch(e) {}\" href=\"https:\/\/i0.wp.com\/bp2.blogger.com\/_77gB19IZDW4\/RoIVHH7mnGI\/AAAAAAAAAG4\/PvHXBEsTfu8\/s1600-h\/ABSA%2Bphishing%2Battack%2Bscreenshot.jpg\"><img data-recalc-dims=\"1\" decoding=\"async\" style=\"margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 598px; height: 436px;\" src=\"https:\/\/i0.wp.com\/bp2.blogger.com\/_77gB19IZDW4\/RoIVHH7mnGI\/AAAAAAAAAG4\/PvHXBEsTfu8\/s400\/ABSA%2Bphishing%2Battack%2Bscreenshot.jpg?w=605\" alt=\"\" id=\"BLOGGER_PHOTO_ID_5080646541759650914\" border=\"0\" \/><\/a><br \/>If you see one of these in your inbox, go to the institution in question and send them a copy of the email. (Go directly to the site in question without clicking any links on the email itself. The email will take you to a duplicate site that LOOKS like the institution in question. It&#8217;s all fake.)<\/p>\n<p>Then, if you&#8217;re using Gmail, report it as a phishing attack, and it&#8217;ll be deleted. If you don&#8217;t use Gmail, delete the mail.<\/p>\n<p><a onblur=\"try {parent.deselectBloggerImageGracefully();} catch(e) {}\" href=\"https:\/\/i0.wp.com\/bp3.blogger.com\/_77gB19IZDW4\/RoIWoX7mnHI\/AAAAAAAAAHA\/pgsM-IFc2QE\/s1600-h\/Address%2Bbar.jpg\"><img data-recalc-dims=\"1\" decoding=\"async\" style=\"margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;\" src=\"https:\/\/i0.wp.com\/bp3.blogger.com\/_77gB19IZDW4\/RoIWoX7mnHI\/AAAAAAAAAHA\/pgsM-IFc2QE\/s400\/Address%2Bbar.jpg?w=605\" alt=\"\" id=\"BLOGGER_PHOTO_ID_5080648212501929074\" border=\"0\" \/><\/a><br \/>Do NOT click on the link. If you&#8217;re curious, when you receive a phishing attack, you can hover your mouse over the link, and look at the address bar at the bottom of your browser. In this case, the address comes up as something at &#8216;karatesamurai.com&#8217;. Does that sound like a legitimate Absa address to you?<\/p>\n<p><a onblur=\"try {parent.deselectBloggerImageGracefully();} catch(e) {}\" href=\"https:\/\/i0.wp.com\/bp0.blogger.com\/_77gB19IZDW4\/RoIXUn7mnII\/AAAAAAAAAHI\/zboeGiTBsWU\/s1600-h\/absa%2Bmailed%2Bby.jpg\"><img data-recalc-dims=\"1\" decoding=\"async\" style=\"margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;\" src=\"https:\/\/i0.wp.com\/bp0.blogger.com\/_77gB19IZDW4\/RoIXUn7mnII\/AAAAAAAAAHI\/zboeGiTBsWU\/s400\/absa%2Bmailed%2Bby.jpg?w=605\" alt=\"\" id=\"BLOGGER_PHOTO_ID_5080648972711140482\" border=\"0\" \/><\/a>I&#8217;ve screengrabbed this with &#8216;Show Details&#8217; on. Notice the &#8216;Mailed-By&#8217; field. It&#8217;s &#8216;ifk.wopsa8.com&#8217;. You can easily see that that&#8217;s nothing to do with Absa if you delve into the innards of the message.<\/p>\n<p>But the rule is this: your banking institution will never send you a request of this kind. Ignore them.<\/p>\n<p>The telling part here for me is that I&#8217;m not even an Absa client.<\/p>\n<div style=\"font-style: italic;\" class=\"tag_list\"><span style=\"font-size:85%;\">Tags: <span class=\"tags\"><a href=\"http:\/\/technorati.com\/tag\/phishing\" rel=\"tag\">phishing<\/a>, <a href=\"http:\/\/technorati.com\/tag\/absa\" rel=\"tag\">absa<\/a>, <a href=\"http:\/\/technorati.com\/tag\/banking\" rel=\"tag\">banking<\/a>, <a href=\"http:\/\/technorati.com\/tag\/scam\" rel=\"tag\">scam<\/a>, <a href=\"http:\/\/technorati.com\/tag\/royblumenthal\" rel=\"tag\">royblumenthal<\/a>, <a href=\"http:\/\/technorati.com\/tag\/blumenthal\" rel=\"tag\">blumenthal<\/a>, <a href=\"http:\/\/technorati.com\/tag\/coffee-shopschmuck\" rel=\"tag\">coffee-shopschmuck<\/a><\/span><\/span><\/div>\n<div class=\"blogger-post-footer\">Roy Blumenthal is a writer, director, artist, and <a href=\"http:\/\/snipurl.com\/visualfacilitator\">visual facilitator<\/a>. Hire him to make pictures of your meetings or workshops.<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Click this pic for a clear view of the text: If you see one of these in your inbox, go to the institution in question and send them a copy of the email. (Go directly to the site in question &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"more-link\" href=\"https:\/\/royblumenthal.com\/wordpress\/phishing-attack-purporting-to-come-from-absa-bank\/\"> <span class=\"screen-reader-text\">Phishing attack &#8212; purporting to come from Absa bank<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[13],"tags":[],"class_list":["post-446","post","type-post","status-publish","format-standard","hentry","category-phishing"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p521FP-7c","_links":{"self":[{"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/posts\/446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/comments?post=446"}],"version-history":[{"count":0,"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/posts\/446\/revisions"}],"wp:attachment":[{"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/media?parent=446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/categories?post=446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/royblumenthal.com\/wordpress\/wp-json\/wp\/v2\/tags?post=446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}