Spam and phishing mail

A Nigerian Easter egg

We’ve just come across a neat little phishing attack. The Equitorial Trust Bank seems to have a few issues with server security. Of course, the fact that the bank is located in Nigeria might ring a few warning bells, and we’re looking into this.

Currently, however, the bank doesn’t seem to have noticed the Easter egg that they’re hosting – a phishing page for eggTM banking customers.

The eggTM page differs from the legitimate eggTM log-in page only in the colours that it uses. Sadly, we know from experience that users often don’t notice differences like that.

Of course, we’ve notified the bank, and maybe they’ll be more security conscious in future.

A Nigerian Easter egg

Your email address will not be published. Required fields are marked *

 

Reports

APT trends report Q3 2022

This is our latest summary of advanced persistent threat (APT) activities, focusing on events that we observed during Q3 2022.

APT10: Tracking down LODEINFO 2022, part I

The first part of this report will provide technical analysis of the new infection methods such as SFX files and DOWNIISSA, a new downloader shellcode used to deploy the LODEINFO backdoor.

Subscribe to our weekly e-mails

The hottest research right in your inbox