8. September 2017 15:59 by sirclesadmin
in Internet Security, SPAM
Metro Bank Spam Email - Your online accounts review notification
Watch out for this circling this week:
Barclays Online Banking - December Newsletter
From: Metro Bank <firstname.lastname@example.org>
Sent: 08 September 2017 15:56
Subject: Your online accounts review notification
Dear valued customer,
Upon intensive reviews on your profile we notice that you need to resolve important security issues on your Metro Online banking account to prevent temporal deactivation .
It is therefore recommended that you complete this process your security is important to us
Please follow step 1 of 2 & 3 carefully to review your Metro Online accounts.
Log in to Metro Online
Metro Bank PLC. Registered in England. Metro Bank PLC is authorised and regulated by the Financial Services Authority (FSA). Registered No 1026167.
Under the Data Protection Act you have a right of access to certain personal records. Should you wish to exercise this right please write to the Data Protection Team, Metro Bank PLC, Knutsford, Cheshire WA16 9EU, quoting ref. APP99. A fee will be charged for this service.
Personal Banking website
Internet communications are not guaranteed to be secure or virus-free. The Metro Bank PLC does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third-party, or from the transmission of any viruses. Replies to this email may be monitored by the Metro Bank PLC for operational or business reasons.
This email and any attachments are confidential and intended solely for the addressee, and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments. Any opinion or other information in this email or its attachment, that does not relate to the business of the Metro Bank PLC, is personal to the sender and is not given or endorsed by the Metro Bank PLC.
The shortcut entitled 'Log in to Metro Online' actually points at http://personal.metrobankonline.co.uk.metrobankretail.servletcontroller.myaccounts.internetbanking.estatement.boneinfoods.com/archive/login.php?&gsTI9r8r905sfeUCUkLTOvNtp8acZ6YfzRYIj6at6fVmuQZobKh0f5tFdDRcKQsjHr21xcuEsq0WgZks
Which seems to be a domain that gets compromised often.
The site is a great mimic of the real site but do not enter any details obviously as it is an impostor: