ACTION REQUIED: Notice for your account

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

From - Fri Aug 31 17:41:28 2012
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 129.1.5.17
Received-SPF: none (domain of ime2.jpmchase.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [129.1.5.17]
Authentication-Results: mta1000.mail.ird.yahoo.com from=; domainkeys=neutral (no sig); from=ime2.jpmchase.com;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp01.bgsu.edu) (129.1.5.17)
by mta1000.mail.ird.yahoo.com with SMTP; Fri, 31 Aug 2012 08:41:53 -0700
Received: from smtp.bgsu.edu (admin-172-18-50-99.wireless.bgsu.edu [172.18.50.99])
        by smtp01.bgsu.edu (Switch-3.2.5/Switch-3.1.6) with SMTP id q7VFd0g4028529;
        Fri, 31 Aug 2012 11:39:02 -0400 (EDT)
Message-Id: <x@smtp01.bgsu.edu>
From: "Chase Online®"<chasealertsm@ime2.jpmchase.com>
Subject: ACTION REQUIED: Notice for your account
Date: Fri, 31 Aug 2012 11:39:23 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0010_01C2A9A6.6CA8DC24"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Body:

Email Security Information

Note: This is a service message with information related to your Chase account(s). It may include specific details about transactions, products or online services.

Please read carefully if you use Chase Online or Chase Mobile Banking

Dear Valued Customer:

We will be making enhancements to chase(SM) and our mobile platforms that will help us meet our objective of continually improving these services.

As a result of these enhancements, some services on chase(SM) and Chase Mobile will be temporarily unavailable until you complete a simple update on your account information.

Read details below.

	•		We are upgrading to a further advanced technology. Due to the increase of cyber threat. Due to this, we have sent you an attached HTML Web Page. – See Attached for HTML Web Page –Download and Save it to Desktop –Go to Desktop to open the HTML Web Page – Get Started by Filling your Information


	•		Please understand that this is a security procedure intended to safeguard our valued customers and thier account(s) information

We appreciate your patience during this time. We are working hard to deliver the best customer experience through chase(SM) and Chase Mobile Banking.

Sincerely,

William S. Sheley
Senior Vice President
Chase Online Banking

Note: If you are concerned about clicking links in this e-mail, the Chase services mentioned above can be accessed by typing www.chase.com directly into your browser.

Your personal information is protected by advanced technology. For more detailed security information, view our Online Privacy Notice. To request in writing: Chase Privacy Operations, P.O. Box 659752, San Antonio, TX 78265-9752.

JPMorgan Chase Bank, N.A. Member FDIC
©2012 JPMorgan Chase & Co.

LC-CCMOB1011ALL

This email was sent to: You

Comments:

We are upgrading to a further advanced technology. Due to the increase of cyber threat.

...

Please understand that this is a security procedure intended to safeguard our valued customers and thier account(s) information

Chase will never send you an e-mail with horrible grammar and typos like this.

This email was sent to: You

Wow! We would have never guessed that.

An HTML file with the name 0,,2_700271--FileV_7103_01.html was attached to this e-mail. This fake Chase web page asks for A LOT of personal and sensitive information, like your user id, password, complete credit card information, social security number, tax number, your mother's maiden name, your birth date, driver's licence number, your e-mail address and the password to your e-mail account as well. Chase will never request personal information like this via e-mail.

The scammers even have a lame excuse for requesting the password to your e-mail account:

We have introduced a new e-mail security, that protects you from unauthorized Identification code request, when signing on from a different PC. That means if anyone steals your account information and also has your e-mail access to get the Identification code, he will not be able to use it.

This makes not sense at all. If the bank has the password to your e-mail account on file, how will this prevent someone from using the Identification code? This is hogwash and Chase will never request the password to your e-mail account.

This scam bears a close resemblance to one of the latest ABSA phishing scams. The approach is basically the same, but this one is a bit more easier for the user to execute, so it will likely be more effective and therefore poses a higher threat.

Related Cyber Criminal Profiles:

No related profiles found.

Similar Spam Examples:

Banking Phishing Scam - Your Chase Credit Card Account
Chase Account Form Phishing Scam
Banking Phishing Scam - Chase Alert(SM): Notice for your Account
Chase Online Banking Phishing Scam - You Have New Mail
Malware Spam - Chase Merchant Statement

Related Malware Samples:

No related malware samples found.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]