The email message below with the subject: "During our usual security enhancement protocol, we observed multiple login attempt error while login in to your online banking account," is a Bank of American phishing scam. The message, which was not sent by the Bank of America, contains a link that will take recipients who have clicked any of the link in the same message, to a fake Bank of America website created to steal their Bank of America username, password and security questions.
The Bank of America Alert Phishing Email
From: Bank of America Alert (onlinebanking@ealerts.bankofamerica.com)
Sent: Thu 12/12/13 4:52 AM
Online Banking Alert
Dear valued customer :
During our usual security enhancement protocol, we observed multiple login attempt error while login in to your online banking account. We have believed that someone other than you is trying to access your account for security reasons, we have temporarily suspend your account and your access to online banking and will be restricted if you fail to update.
To get start :
> Log on to https://www.bankofamerica.com/privacy/update.jsp
Please Note:
Always look for your SiteKey® before entering your Passcode.
Remember, Bank of America is committed to your security and protection.to find out more, take a look at our Information Security section under Privacy and Security on the Web site.
Bank of America, Member FDIC.
© 2013 Bank of America Corporation. All Rights Reserved.
The link in the email message goes to the fake Bank of America website below:
hxxp://update. onlinebanking. bankofamerica.com. bikeindoor.com.br/
Banking credentials entered on the bogus website will be sent to the scammers behind it, who will use the informatin to gain access to their potential victims' online banking accounts. Therefore, Bank of America customers who have been tricked by the fake email message, are asked to change their Bank of America password and contact the Bank of America.
Recipients of email messages that claim there is something wrong with their Bank of America online accounts, are asked to always go to https://www.bankofamerica.com/, sign into their accounts, and check their accounts for any descrepancies, instead of clicking on the links in the email messages.