Sunday, July 13, 2008

Axis Bank Security Alert!: Multiple failed logins on Internet Banking Module - Phishing, Fraud

Have you got any mail with the subject " Security Alert!: Multiple failed logins on Internet Banking Module " from 'Axis Bank '? Then be very careful. Read this article very carefully as the mail you have got is of Phishing Site

Even one of my friend has got the similar mail. Here I am posting the mail along with the contents for your reference. Later I will show you how you too can identify that the mail was from Hacker referencing to the phising site.

Here is the content of the mail
-----------------------------------------------------

From: AXIS BANK security@axisbank.com
Date: 2008/7/11
Subject: Security Alert!: Multiple failed logins on Internet Banking Module

Axis Bank Logo

Security Alert:
The security of your identity and personal account information is extremelyimportant to us. We are upgrading our Online Security as an additional wayof protecting your account and reducing the instances of fraud on our website.Our Enhanced Online Security access will allow AXIS BANK Online security team to verify your identity from your computer anywhere you bank online. Your online account access information's would be recognized and you will be notified through SMS that you have signed on to AXIS Online Banking. This Two-way processensures that both parties are confident of each other's identity. Every customer that uses AXIS Online Banking access will be required toactivate his or her Two-way Online Security.

To activate this service please click on the following link:
h ttps://www.axisbank.com/security/activate=page
Thank You.

Accounts Management As outlined in our User Agreement, Axis ® Bank will periodically send you information about site changes and enhancements.
Visit our Privacy Policy and User Agreement if you have any questions.

-----------------------------------------------------

Here is the image of the email


Email depicting as Axis Bank Security Alert

Now give a closer attention to the URL (website address) provided in the mail

Wrong URL for Axis Bank Security Page


From the above image you can see that the URL mentioned is
'h ttps://www.axisbank.com/security/activate=page'. Make a note that there is gap between 'h' and 't' of 'https'. And the very interesting part is that when I took my mouse over the link, the actual address to which the url was pointing, was shown in the 'Status Bar' of the browser and the URL was "http://axis-update.net/index.php?bank=www.axisbank.com". This URL is totally different than the one mentioned in the mail. This is the 1st observation to identify whether the mail is from the bank or from hacker.

When I clicked on the url immediately my Firefox Browser alerted me saying that this is the phishing site, as shown below in the image.


Web Forgery or Phishing Activity Notification by Firefox

This is the 2nd and most important observation to identify whether the site is geniune of phishing site.

Here, I was lucky as I was using the 'Firefox Browser' and it showed me that the site is a fake, but what if you are using some other browsers? (Readers, if there are any utilities for Opera and Internet Explorer browsers to identify the phishing, kindly let me know by adding in comments).

So whatever the case it might be, be very careful whenever you get such a mails.


Word of caution: Don't think that it doesn't matter you, incase if you don't have an account in 'Axis Bank'... There are chances that you may get similar kind of email, fake email, related to your bank account like 'ICICI Bank', 'SBI Bank', 'HDFC Bank', 'Corporation Bank', 'Vijaya Bank', 'IDBI Bank'.. etc..

So never ever try to disclose your credentials.. None of the banks will ask you to do so.. Be Aware.... Try to educate your family and friends too....



5 comments:

Anonymous said...

I just got this email and being that I don't have ANY credit cards I knew right away this was a fraud. PLEASE everyone beware of this!

Anonymous said...

oh! I got an email from...
HDFC Bank Ltd security@hdfc.com

subject Security Alert!: I-Connect Netbanking Precaution.

Security Alert:

The security of your identity and personal account information is extremely
important to us. We are upgrading our Online Security as an additional way
of protecting your account and reducing the instances of fraud on our website.

Our Enhanced Online Security access will allow IDBI BANK Online security team
to verify your identity from your computer anywhere you bank online.

Your online account access information's would be recognized and you will be notified
through SMS that you have signed on to IDBI Online Banking. This Two-way process
ensures that both parties are confident of each other's identity.

Every customer that uses IDBI Online Banking access will be required to
activate his or her Two-way Online Security.

To activate this service please follow the link below:
https://www.idbibank.com/security/activate=acct

Thank You.


Accounts Management As outlined in our User Agreement, IDBI ® Bank will
periodically send you information about site changes and enhancements.

Visit our Privacy Policy and User Agreement if you have any questions.

really crazy!

generic viagra said...

I think that the security banks are really good, I think that it is so important because we can feel good and do not care about our money , the money is safe and really good!!22dd

Anonymous said...

There is certainly a great deal to find out about this
issue. I really like all of the points you made.

My website ... waist height ratio

Anonymous said...

golden goose
bape
curry 6 shoes
kyrie 7
hermes bags