{"id":579,"date":"2022-02-21T16:10:44","date_gmt":"2022-02-21T21:10:44","guid":{"rendered":"https:\/\/dev.is.wfu.edu\/infosec\/?p=579"},"modified":"2022-02-21T16:10:46","modified_gmt":"2022-02-21T21:10:46","slug":"recent-phishing-scams-imitating-financial-institutions","status":"publish","type":"post","link":"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scams-imitating-financial-institutions\/","title":{"rendered":"Recent phishing scams imitating financial institutions"},"content":{"rendered":"\n<p>Presently, there is a text phishing \u201csmishing\u201d campaign imitating financial institutions with alarming messages regarding account security issues. Be sure to scrutinize message content when opening texts, as well as the source before responding to the sender or interacting with embedded links and\/or attachments.<\/p>\n\n\n\n<p>Following is an example of a recent fraudulent text message. It appears to be an urgent message from Wells Fargo encouraging the user to click on the link for more information. <strong>Do not click links! <\/strong>Links have been known to send users to malicious landing pages. Instead, log in to your account directly from the financial institution&#8217;s page rather than via embedded links within suspicious messages.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/zgcrQBsE_XrdRThxc9Ig_IDgSFdVz3zYMApgAhhOzCXmJObq98l_bM_V8q09vDOiuiddT8ZXiP0EaiymKq008AHvVmnbQJexWeLAb9Fj0vScN05u_9DBRhOcjkoqYba5VL34aVHv\" alt=\"screenshot of sample message &quot;FRM: WF-NOTICE\nMSG-Support important notice! Access suspended. LINK Client ID: number&quot;\" \/><\/figure><\/div>\n\n\n\n<p><strong>IT Security has provided the following image to show what you might see if you do click on a suspicious link. <\/strong>This scam in particular is sending users to a landing page imitating a Wells Fargo account login page. URLs beginning with HTTP versus HTTPS is a highly suspicious indicator of a fraudulent message. Use of a foreign language, poor grammar, and misspelling can also indicate a phishing attempt.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/9CpMzwdcwjX8E48q24DZ0XCW2K18jsSbHSb2kEKcCp_FwWLRkOBhZBzz6Qci5vnel5KqMNGsCUowy52JNm9BS_Lc0J-DYmp2qEGDw6rID1sP4Dvn91A0lEahjSAIqTtw89yLhngj\" alt=\"screenshot of fake landing page the link in the text message sends user to. \" \/><\/figure><\/div>\n\n\n\n<p><strong>Do not become a phishing victim:&nbsp;<\/strong><\/p>\n\n\n\n<ul><li>Be wary of texts from unknown numbers.<\/li><li>Be suspicious of an unexpected request for \u2018required information\u2019 to regain access to a credit card or a financial account.<\/li><li><strong>Do not provide personal information via text or email! It is tax season and it is important to remember that the IRS, banks, or other institutions will never ask for personal information via text or email<\/strong>.&nbsp;<\/li><li>If you are unsure about the content or validity of a text or email, do not respond to it. Forward any suspicious texts or emails to the Information Systems Security Team at <a href=\"mailto:infosec@wfu.edu\">infosec@wfu.edu<\/a> for further analysis and then delete the message.<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Presently, there is a text phishing \u201csmishing\u201d campaign imitating financial institutions with alarming messages regarding account security issues. Be sure to scrutinize message content when opening texts, as well as the source before responding to the sender or interacting with embedded links and\/or attachments. Following is an example of a recent fraudulent text message. It&hellip;&NewLine;<a href=\"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scams-imitating-financial-institutions\/\" title=\"Read more on Recent phishing scams imitating financial institutions\">Read More &raquo;<\/a><\/p>\n","protected":false},"author":11,"featured_media":580,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[17,13,12,6,21,22,7],"acf":[],"_links":{"self":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts\/579"}],"collection":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/comments?post=579"}],"version-history":[{"count":1,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts\/579\/revisions"}],"predecessor-version":[{"id":581,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts\/579\/revisions\/581"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/media\/580"}],"wp:attachment":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/media?parent=579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/categories?post=579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/tags?post=579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}