Today I got this email, I don’t have an account at Public Bank so I can tell this is fake immediately

Fake email lure user to go to Fake site

Identify phishing email

How do you know it is a phishing email? there are some suspicious spot you can find in phishing email and sites

Bank will not ask you to reset/login/update to your account

Bank will not request you to update your Passwords, Login IDs, NRIC numbers or any other personal information through e-mails / phone calls. So be VERY cautious when receiving those email

Suspicious URL/Address

The link point to suspicious URL/address, when you put your mouse cursor to a link (underlined blue word that point you to other site), the status bar below the screen will show the URL/address that the link will direct you when u click on it. Example of fake site URL are

• http://78.176.159.50/ww2.publicbank.com.my/?main.html/
• http://923fw2934d/ww2.publicbank.com.my/?main.html/
• http://www.publiebank.com.my

As you can see there are suspicious IP/hex/random character in front of the address, or wrong spelling in the address. In example 3 if you don’t look properly you might overlook and got fooled

How to avoid?

Always manually type in the address, or add the internet bank to favorite/bookmark and go to the site manually instead of click on the link by email.

Fake/Phishing site to capture password

Fake/Phishing web site imitate Public bank login page

Notice the additional random character in front of the address. The site imitate public bank login page, if you type your user ID and password on it, your password will be captured by bad guys and your savings are in danger!!!

Want to familiar yourself on phishing email? This is another example

That’s all for today. Stay safe.