Brain Krebb's today has a blog that outlines a smart vishing attack on Bank of America customers. The customers receive an email notifying them that they are in violation of the bank's acceptable use policy. They then give the customer a 1-800 number to dial. In this case, the message was done very well. It asked for the customer's PIN in order to validate their identity. After that, the criminal has the information to begin drawing down from the account.
Don't respond to these emails and use the phone number provided!!!! If you are concerned, look up the bank's phone number in a telephone directory or via the internet and call them up directly to talk about the email and your account. If you don't then your identity and authentication information are in the hands of criminals.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com
del.icio.us