JPMorgan Customers Targeted in Email Phishing Campaign

Thursday, 21 Aug 2014 03:43 PM

 

Share:
  Comment  |
   Contact Us  |
  Print  
|  A   A  
  Copy Shortlink
Fraudsters are targeting JPMorgan Chase & Co customers in an email "phishing" campaign that is unusual because it attempts to collect credentials for that bank and also infect PCs with a virus for stealing passwords from other institutions.

The campaign, dubbed "Smash and Grab," was launched on Tuesday with a widely distributed email that urged recipients to click to view a secure message from JPMorgan, according to security researchers with corporate email provider Proofpoint Inc.

JPMorgan, the No. 1 U.S. bank by assets, confirmed that spammers had launched a phishing campaign targeting its customers.

"It looks like they sent it out to lots of people in hopes that some of them might be JPMorgan Chase customers, because there are a lot of them," said bank spokeswoman Trish Wexler."We are seeing this as a very small incident."

She said the bank believes most of the spam was stopped by fraud filters at large Internet providers, adding that the email looked realistic because the attackers apparently used a screen grab from an authentic email sent by the bank.

Banking Trojan


Users who click on a malicious link are asked to enter credentials for accessing accounts with JPMorgan. Even if they did not comply, the site attempted to automatically install the Dyre banking Trojan on their PCs, according to Proofpoint.

Dyre is a recently discovered piece of malware that seeks credentials from customers of Bank of America Corp, Citigroup Inc and the Royal Bank of Scotland Group PLC , according to email security firm Phishme.

Proofpoint Vice President of Threat Research Mike Horn said it is unusual for spammers to infect PCs with malware in the same campaign that is seeking to persuade users to provide banking credentials because that increases the odds of detection.

"Usually when they do credential phishing, that is all they do. In this case they are throwing in the kitchen sink," Horn said.

Cybercrime Gangs

Proofpoint saw about 150,000 emails from the group on Tuesday, the first day it noticed the campaign among its customers in the Fortune 500 and higher education.

That makes a moderately large campaign, but the largest attempts involve sending more than 1 million pieces of spam over a few days to Proofpoint clients, he said. The firm manages over 100 million email accounts.

Horn said that Proofpoint quickly identified the spam and was able to stop it infecting customers, but was not sure how effective it was in infecting others.

Horn said that his firm was unsure who was behind the emails, though much of the campaign's infrastructure was in Russia and Ukraine and the group's tactics were consistent with those of Eastern European cybercrime gangs.

© 2014 Thomson/Reuters. All rights reserved.

Share:
  Comment  |
   Contact Us  |
  Print  
  Copy Shortlink
Around the Web
Join the Newsmax Community
Please review Community Guidelines before posting a comment.
>> Register to share your comments with the community.
>> Login if you are already a member.
blog comments powered by Disqus
 
Email:
Country
Zip Code:
Privacy: We never share your email.
 
Hot Topics
Follow Newsmax
Like us
on Facebook
Follow us
on Twitter
Add us
on Google Plus
Around the Web
You May Also Like

El-Erian: Global Economic Slowdown Remains a Concern

Saturday, 25 Oct 2014 11:55 AM

While the U.S. stock market may have rebounded sharply from its recent plunge, that doesn't mean all is hunk dory with t . . .

Kudlow: Obama's Head Will Spin From New Conservative Agenda

Friday, 24 Oct 2014 21:35 PM

The vast majority of political journalists , and I include some of my conservative colleagues , are missing a very big s . . .

Stocks Rise on Earnings, S&P 500 Caps Best Week Since 2013

Friday, 24 Oct 2014 17:09 PM

U.S. stocks rose, with the Standard & Poor's 500 Index capping its best week since 2013, as companies from Procter & Gam . . .

Most Commented
Top Stories

Newsmax, Moneynews, and Independent. American. are registered trademarks of Newsmax Media, Inc. Newsmax TV, NewsmaxWorld, NewsmaxHealth, are trademarks of Newsmax Media, Inc.

 
NEWSMAX.COM
America's News Page
©  Newsmax Media, Inc.
All Rights Reserved