Wednesday, March 16, 2016

Action Needed: Verify Account Information's (USAA Phishing Attempt)

To ensure the clear view of the message, please click show images and move it to your inbox folder.

USAA Member Home
Verify Account Information's

Dear USAA Customer,

We're currently upgrading our systems to bring enhanced features to your USAA Account experience. As a result, your account is temporarily unavailable.
Please download the file attached and upgrade your USAA Account to our new system.

Note: FAIL TO UPGRADE YOUR ACCOUNT, IT WILL BE AUTOMATICALLY CLOSED.

After this step, you are permitted to access your usaa.com System.

Thank you,
USAA

Please do not reply to this e-mail. To ensure the safety of your account, please update your information in our database.
USAA, 9800 Fredericksburg Road, San Antonio, Texas 78288.

USAA means United Services Automobile Association and its insurance, banking and investment affiliates.
87832-0713

Update_Account_Information's-USAA.html

USAA Phishing attempt analysis :

- The phishing was an html page.
- The page is also available as a raw file : http://pastebin.com/raw/B4DLgJe8

Email analysis :

NOTE : fevima@infonegocio.com
NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < fevima@infonegocio.com >
NOTE : X-Priority : 3
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Received : from pop.prtcnet.org (pop.prtcnet.org. [69.176.19.5])
NOTE : Received : from [46.21.150.135] (helo=User) by pop.prtcnet.org


NOTE : client-ip=69.176.19.5;
NOTE : Action Needed: Verify Account Information's

No comments:

Post a Comment