SunTrust "Validate Your Account‏" Phishing Email Messages

Comments: 1
Views: 2,283
Save
Updated: Nov. 27, 2016 2016-11-27T09:29:18
Posted: Nov. 27, 2016 2016-11-27T09:19:42
Online Threat Alerts (OTA)

SunTrust Bank customers are asked to be aware of fake email messages that claim they need to validate their accounts by confirming their information. The fake email messages are phishing scams being used by cyber-criminals to steal personal and banking information. The links in the fake messages go to phishing websites, looking like SunTrust Bank’s website, where visitors will be asked to sign-in with their account credentials. Once the victims enter their account credentials on the fake website, it will be sent to the cyber-criminals behind the scam, who will use it to gain to access to their victims’ accounts, where they will steal the victims’ money and use their accounts fraudulently.

A Sample of the Phishing SunTrust Bank Email Messages

Subject: Validate Your Account
From: SunTrust.com [reception@ssp.local]
Date: Sat, November 26, 2016 5:19 am

Dear Customer Suntrust.

We're sorry - Please confirm your information promptly so that you can continue to enjoy all the benefits of your SunTrust Account.

Validate Your Account Here To Activate Your Account.

Suntrust Fraud Department,

© 2016 SunTrust Banks, Inc.

SunTrust Bank is an Equal Housing Lender. Member FDIC.

It is important for internet users to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to their online account providers’ websites, by typing the addresses of the websites in their web browsers or using a popular search engine to find the websites.

For example:
SunTrust’s customers should go directly to: “https://www.suntrust.com/” in their web browsers or search for “SunTrust Bank” using a popular search engine.

And, if there is something wrong with their accounts or there is something that they need to do, they will be notified right after signing in.

Recipients of the phishing SunTrust email, who have clicked on the link and have attempted to sign into the phishing website with their accounts’ credentials, should change their passwords and contact SunTrust Bank immediately.