Axis Bank Security Alert!: Multiple failed logins on Internet Banking Module - Phishing, Fraud

Have you got any mail with the subject " Security Alert!: Multiple failed logins on Internet Banking Module " from 'Axis Bank '? Then be very careful. Read this article very carefully as the mail you have got is of Phishing Site

Even one of my friend has got the similar mail. Here I am posting the mail along with the contents for your reference. Later I will show you how you too can identify that the mail was from Hacker referencing to the phising site.

Here is the content of the mail
-----------------------------------------------------

From: AXIS BANK security@axisbank.com
Date: 2008/7/11
Subject: Security Alert!: Multiple failed logins on Internet Banking Module

Security Alert:
The security of your identity and personal account information is extremelyimportant to us. We are upgrading our Online Security as an additional wayof protecting your account and reducing the instances of fraud on our website.Our Enhanced Online Security access will allow AXIS BANK Online security team to verify your identity from your computer anywhere you bank online. Your online account access information's would be recognized and you will be notified through SMS that you have signed on to AXIS Online Banking. This Two-way processensures that both parties are confident of each other's identity. Every customer that uses AXIS Online Banking access will be required toactivate his or her Two-way Online Security.

To activate this service please click on the following link:
h ttps://www.axisbank.com/security/activate=page
Thank You.

Accounts Management As outlined in our User Agreement, Axis ® Bank will periodically send you information about site changes and enhancements.
Visit our Privacy Policy and User Agreement if you have any questions.

-----------------------------------------------------

Here is the image of the email

Now give a closer attention to the URL (website address) provided in the mail

From the above image you can see that the URL mentioned is
'h ttps://www.axisbank.com/security/activate=page'. Make a note that there is gap between 'h' and 't' of 'https'. And the very interesting part is that when I took my mouse over the link, the actual address to which the url was pointing, was shown in the 'Status Bar' of the browser and the URL was "http://axis-update.net/index.php?bank=www.axisbank.com". This URL is totally different than the one mentioned in the mail. This is the 1st observation to identify whether the mail is from the bank or from hacker.

When I clicked on the url immediately my Firefox Browser alerted me saying that this is the phishing site, as shown below in the image.

This is the 2nd and most important observation to identify whether the site is geniune of phishing site.

Here, I was lucky as I was using the 'Firefox Browser' and it showed me that the site is a fake, but what if you are using some other browsers? (Readers, if there are any utilities for Opera and Internet Explorer browsers to identify the phishing, kindly let me know by adding in comments).

So whatever the case it might be, be very careful whenever you get such a mails.

Word of caution: Don't think that it doesn't matter you, incase if you don't have an account in 'Axis Bank'... There are chances that you may get similar kind of email, fake email, related to your bank account like 'ICICI Bank', 'SBI Bank', 'HDFC Bank', 'Corporation Bank', 'Vijaya Bank', 'IDBI Bank'.. etc..

So never ever try to disclose your credentials.. None of the banks will ask you to do so.. Be Aware.... Try to educate your family and friends too....

Related Contents:

• Similar kind of email targetting Axis Bank during June 5th, 2008
• Phish Tank - Collection of Phishing Sites report