jetcareers

Go Back   jetcareers > General > General Topics

Closed Thread
 
Thread Tools Display Modes
Old August 20th, 2004, 23:40   #1
tonyw
Old Skool
 
tonyw's Avatar
 
Join Date: May 2002
Location: Maryland
Posts: 15,165
Send a message via AIM to tonyw Send a message via MSN to tonyw Send a message via Yahoo to tonyw
Default Citibank Email Spoof

Be careful, folks.

Here is what I just got tonight.

Dear TonyW,

We recently noticed one or more attemps to sign on to your Citibank account from a foreign IP address and we have reasons to belive that there was attempts to compromise it with brute forcing your PIN number.
No successful login was detected and you have full protection by now. If you recently accessed your account while travelling, the unusual login attempts may have been initiated by you.

The login attempt was made from:
IP address: 173.29.197.24
ISP Host: cache-0082.proxyserver.cis.com


By now, we used many techniques to verifythe accuracy of the information our users provide us when they register on the Site. However, because user verification on the Internet is difficult, Citibank cannot and does not confirm each user's purported identity. Thus, we have established an offline verification system to help you evaluate with whom you are dealing with. The system is called CitiSafe and it's the most secure Citibank wallet so far.
If you are the rightful holder of the account, click the link bellow, fill the form and then submit as we will verify your identity and register you to CitiSave free of charge. This way you are fully protected from fraudulent activity on all the accounts that you have with us.

Click to protect yourself from fraudulent activity!

To make Citibank.com the most secure site, every user will be registered to CitiSafe.

regards,

Citibank Customer Support.


U.S. CitiBank Member FDIC, Equal Housing Lender

Citi Inquiries
100 Citibank Drive
P.O. Box 769004
San Antonio, TX 78245-9004


I'm sure that there are many of these going around, not just with Citi, but with other credit card companies and banks. Funny thing is that since I just have a credit card with Citi, not an ATM card, I'm the wrong guy to spoof!

Oh, yeah, as for the foreign IP? Not unless Marina del Rey has seceded from the union!
tonyw is offline  
Old August 20th, 2004, 23:45   #2
Kristie
Big Chief's Woman
 
Kristie's Avatar
 
Join Date: Feb 2001
Location: Scottsdale, Arizona
Posts: 17,704
Blog Entries: 3
Send a message via AIM to Kristie Send a message via Skype™ to Kristie
Default Re: Citibank Email Spoof

geez.. that's not kewl [img]/ubbthreads/images/graemlins/mad.gif[/img]... did you email citibank to let them know this is flowing around? I've seen ones similar and if at any time it says anything like "click this link to protect yourself" blah blah blah, then I know it's spam!!
Kristie is offline  
Old August 20th, 2004, 23:46   #3
TheWife
Old Skool
 
TheWife's Avatar
 
Join Date: Aug 2003
Location: Utah
Posts: 4,180
Send a message via AIM to TheWife Send a message via Yahoo to TheWife
Default Re: Citibank Email Spoof

That doesn't say anything about it being ATM, it sounded to me like it was referring to a credit card. The poor grammer and spelling should hopefully be a dead giveaway for most people. They had a thing about this on 20/20 or one of those shows, Citibank knows about it. I think a similar thing is going on w/ Pay Pal. It's best to always call and talk straight to the company when you have any doubts. Thanks for the warning!
TheWife is online now  
Old August 20th, 2004, 23:57   #4
Doug Taylor
Agent Smith
 
Doug Taylor's Avatar
 
Join Date: Dec 1969
Location: KSDL
Posts: 39,823
Blog Entries: 1
Send a message via AIM to Doug Taylor Send a message via Skype™ to Doug Taylor
Default Re: Citibank Email Spoof

The poor grammar should have been the 'red flag'! [img]/ubbthreads/images/graemlins/smile.gif[/img]
Doug Taylor is offline  
Old August 21st, 2004, 00:03   #5
chrisesp
Senior Member
 
chrisesp's Avatar
 
Join Date: Mar 2004
Location: Bay Area, CA
Posts: 386
Default Re: Citibank Email Spoof

How can you tell where the IP address came from?
chrisesp is offline  
Old August 21st, 2004, 00:14   #6
tonyw
Old Skool
 
tonyw's Avatar
 
Join Date: May 2002
Location: Maryland
Posts: 15,165
Send a message via AIM to tonyw Send a message via MSN to tonyw Send a message via Yahoo to tonyw
Default Re: Citibank Email Spoof

If you google IP address lookup, you can find a bunch of places where you enter an IP address, and they tell you who owns it.

Michelle, I saw the brute force it with your PIN and thought it might have been trying to get ATM information from me!
tonyw is offline  
Old August 21st, 2004, 00:22   #7
chrisesp
Senior Member
 
chrisesp's Avatar
 
Join Date: Mar 2004
Location: Bay Area, CA
Posts: 386
Default Re: Citibank Email Spoof

Man that is horrible grammer, these people need a spell check program!
chrisesp is offline  
Old August 21st, 2004, 00:40   #8
TheWife
Old Skool
 
TheWife's Avatar
 
Join Date: Aug 2003
Location: Utah
Posts: 4,180
Send a message via AIM to TheWife Send a message via Yahoo to TheWife
Default Re: Citibank Email Spoof

[ QUOTE ]
Michelle, I saw the brute force it with your PIN and thought it might have been trying to get ATM information from me!

[/ QUOTE ] Oooh. Well credit cards have PIN's too. So they could have meant either. [img]/ubbthreads/images/graemlins/smile.gif[/img]
TheWife is online now  
Old August 21st, 2004, 01:19   #9
Doug Taylor
Agent Smith
 
Doug Taylor's Avatar
 
Join Date: Dec 1969
Location: KSDL
Posts: 39,823
Blog Entries: 1
Send a message via AIM to Doug Taylor Send a message via Skype™ to Doug Taylor
Default Re: Citibank Email Spoof

I like how the phisher wanted you to register for "CitiSafe" although if you read your cardholders agreement (I do that stuff, trust me), you've got protection by default.
Doug Taylor is offline  
Old August 21st, 2004, 07:25   #10
mtsu_av8er
Old Skool
 
mtsu_av8er's Avatar
 
Join Date: Dec 2002
Location: Utopia
Posts: 12,403
Default Re: Citibank Email Spoof

Oh, yeah...I've gotten them from BofA, Ebay, Sallie Mae, CitiBank....all lenders of mine for one thing or another!!
mtsu_av8er is offline  
Old August 21st, 2004, 10:45   #11
TheWife
Old Skool
 
TheWife's Avatar
 
Join Date: Aug 2003
Location: Utah
Posts: 4,180
Send a message via AIM to TheWife Send a message via Yahoo to TheWife
Default Re: Citibank Email Spoof

I got an email this morning that said "Michelle your income was $97,000 last year..." Who knows what the point was and what they wanted me to do with it, but my income was only about 10% of that! LOL! If it really was supposed to be $97K I'd sure like access to those missing checks!!
TheWife is online now  
Old August 21st, 2004, 12:06   #12
flyhigh
Senior Member
 
flyhigh's Avatar
 
Join Date: May 2004
Location: Boston
Posts: 614
Default Re: Citibank Email Spoof

I got the same e-mail from Citibank. It wanted my social security #, PIN number, mother's maiden name, and all the rest of my personal info. Funny thing is, I don't have a card from them.
flyhigh is offline  
Old August 21st, 2004, 12:45   #13
flyn_ace_99
Junior Member
 
flyn_ace_99's Avatar
 
Join Date: Mar 2002
Location: not apparently in this universe
Posts: 248
Send a message via AIM to flyn_ace_99 Send a message via Yahoo to flyn_ace_99
Default Re: Citibank Email Spoof

[ QUOTE ]
I got the same e-mail from Citibank. It wanted my social security #, PIN number, mother's maiden name, and all the rest of my personal info. Funny thing is, I don't have a card from them.

[/ QUOTE ]

Me neither! Stuff like that immediatly goes to the trash!
flyn_ace_99 is offline  
Old August 21st, 2004, 12:53   #14
Lurker
 
Posts: n/a
Default Re: Citibank Email Spoof

I believe it. [img]/ubbthreads/images/graemlins/banghead.gif[/img]
 
Old August 21st, 2004, 12:53   #15
Lurker
 
Posts: n/a
Default Re: Citibank Email Spoof

I thought it was a real email from the bank. [img]/ubbthreads/images/graemlins/banghead.gif[/img]
 
Old August 21st, 2004, 12:58   #16
Doug Taylor
Agent Smith
 
Doug Taylor's Avatar
 
Join Date: Dec 1969
Location: KSDL
Posts: 39,823
Blog Entries: 1
Send a message via AIM to Doug Taylor Send a message via Skype™ to Doug Taylor
Default Re: Citibank Email Spoof

I think the key is that I don't use my mother's madien name for ANYTHING at all.

I always ask for them to make my security question something like my high school english teacher's last name, or my cats name or the color of my mom's automobile.

A little research on the internet and I could probably find anyone's mother's madien name, then dig in your garbage and figure out where you've got accounts at. Couple a call to your credit card company, use the "Oh gee, I forgot my login credentials, but here's my address and mother's maiden name" and voila! I'm getting that hemi-truck with the mudflaps wiff the naked women on it!
Doug Taylor is offline  
Old August 21st, 2004, 20:03   #17
TheShortOne
Old Skool
 
TheShortOne's Avatar
 
Join Date: Jun 2003
Location: Park City, UT
Posts: 3,293
Default Re: Citibank Email Spoof

I've been getting a lot of the "our system was recently hacked and we need you to follow this link and enter in your account number so that we can verify your identity" types of email from Bank of America which is entertaining because there aren't any banks of america in michigan (or at least around here) and i sure don't have an account with them. If you hover your mouse over the link you can see that the real page it takes you to starts with a series of numbers before it shows up as a "valid" bank of america page.
TheShortOne is offline  
Old August 21st, 2004, 20:18   #18
JDMcFly
Old Skool
 
JDMcFly's Avatar
 
Join Date: Apr 2003
Location: New York
Posts: 1,664
Default Re: Citibank Email Spoof

Sadly, there are people who will fall the many scams like this, which is why they are still around. This is the reason why I have around 5 email addresses, for different levels of public and private use. [img]/ubbthreads/images/graemlins/smirk.gif[/img]
JDMcFly is offline  
Old August 21st, 2004, 21:50   #19
Nerdwing
Newbie
 
Nerdwing's Avatar
 
Join Date: Sep 2003
Location: Seattle
Posts: 24
Default Re: Citibank Email Spoof

Along those lines be careful about giving out personal information for any reason. When I was younger, and--ahem--not so wise about such things, I hit the mall looking for jobs and blithely plunked down my name, birthday, and SSN on numerous job applications. A couple of years later I was trying really hard to remember when I had bought all the high priced stereo equipment I that was being billed to me. [img]/ubbthreads/images/graemlins/crazy.gif[/img]

Obviously my mistake, but maybe someone else can avoid making the same.
Nerdwing is offline  
Old August 22nd, 2004, 01:50   #20
Kristie
Big Chief's Woman
 
Kristie's Avatar
 
Join Date: Feb 2001
Location: Scottsdale, Arizona
Posts: 17,704
Blog Entries: 3
Send a message via AIM to Kristie Send a message via Skype™ to Kristie
Default Re: Citibank Email Spoof

OOOHhhh nerdwing.. i LOVE your avatar, so fits your username! hahaha [img]/ubbthreads/images/graemlins/grin.gif[/img]
Kristie is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


All times are GMT -4. The time now is 23:24.


Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.1.0
©2008 jetcareers.com