Citibank

sabelu

I received this email on Sunday evening. I am a Citibank customer was very concerned but realised that the site was citibank.com rather than .co.uk which I sign on to. Contacted the telephone banking operation and was told this had gone out to many customers and was fraudulent. Obviously did not give any info but am concerned by just opening could have given access to my system.

soolin

I've had about a dozen e mails now to three of my Hotmail accounts, none of which I have used to sign in to this board. It looks like they are just randomly targetting hotmail accounts.

Interestingly the three hotmail accounts that I have received the emails on have been guessable, by that I mean a proper word and set of numbers. My other hotmail accounts are just nonsense names, a randon set of numbers, letters and symbols so maybe they are not so easily randomly generated.

Soo

mrsmoneyspender

re: citibank
i also recieved this message and have deleted it as i suspected it was a fake
i'm not sure if they got my address from this site but i did post some messages as a guest before i registered and also after registering i sometimes forgot to check if i was still logged on

can i also mention prior to this i got a message from the mods saying i had posted an offensive message!(i believe someone may have sent this somehow under my name) >:(
i did not send any such message and i have now deleted my previous name from the board
i am now cautious when i search the web and check carefully before i register my details
i know most people are but it just shows that you haven't got to let your guard down

it had made me very wary to post on the site again but i thought i needed to tell others what the pitfalls might be when you don't register
again i'm sure most people do know, but maybe like me just click on quickly and forget to register
i will make sure i never do this again

divadee

I have had this e-mail and one from bank of america.

I assumed they got my details from e-bay or something like that.

pelham9

Most spoof emails are fairly obvious but the phishers are getting more sophisticated and it would take an expert to recognise some of them. It is no longer safe to accept a header that looks right. The security padlock and URL to which a link in an email points can be spoofed as https. The usual security measures no longer apply. NEVER ever give any securtiy details (a logon page can be spoofed) after clicking on a link in an email. A securuty conscious corporation would never allow you to logon to their sight via an email. Many UK
institutions do so including EGG and HBOS and they are open to phishing via links in there own emails which can be easily spoofed.

There is another problem that has recently reared its ugly head. If your system is not patched it is possible to download a keylogger by clicking on a link in an email. Up to now we have been warned not to click on email attachments but now hyperlinks can be dangerous.

So NEVER ever click on a link in an email.

Zeldazog

I dont' know what the security is like for other internet bank sites, but Nationwide's site requires a pass number to be entered that cannot be copied by a keylogger.

Out of a six digit pass number, it asks for three of the numbers, but in any order, randomly, each time. They are drop downs, and you have to mouse click to select, can't use the keyboard. Seeing Keyloggers mentioned, I now realise why they did it this way.

dawnylou

Barclays have a pull down asking for 2 letters of your password too. As well as requesting a membership no and a passcode.