Users might be tricked into handing over their credentials

Nov 21, 2012 22:21 GMT  ·  By

Cybercriminals are trying to harvest the online banking credentials of ANZ customers by promising them gifts for the holiday season.

According to Hoax Slayer, the crooks are relying on emails entitled “ANZ Customer Notice,” which read something like this:

“ABOUT THIS MESSAGE Please do not reply to this Customer Service e-mail. ANZ customer notice

Thanks to the approaching holiday season, the Australia and New Zealand Banking Group is rewarding it's most loyal customers. Given our successful cooperation, your account has been declared eligible to receive a 300 AUD gift.

Please follow the link below and insert the required information to receive your gift. [Link]

Once you have confirmed your personal data, your ANZ.com account will be credited with 300 AUD.”

The site the link points to doesn’t have anything to do with ANZ. Instead, it’s a clever phishing website that requests users to enter their personal and financial details in order to receive the gift.

Users are advised to avoid such emails, since by completing the malicious form they’re actually handing over access to their bank accounts to the cybercriminals. If you’ve already fallen for it, be sure to contact ANZ immediately.