Cybercriminals were using a fake Citibank website to access your bank account

www.dailymail.co.uk
4 min read
fairly difficult
Digital thieves created an authentic-looking website in order to access Citibank bank accounts. The site asked users to hand over banking and personal information., including security codes.
A new threat was found hiding behind Citibank in order to access consumers' bank accounts.

An email scam, claiming to be from the American bank, included a link to what appears to be an authentic-looking website with 'update-citi .com' as the domain address.

The fraudulent site was tricking victim's into entering their online banking credentials and then request their personal information - the site was found on Wednesday and immediately shutdown.

Users are asked to provide their full name, address, date of birth, last four digits of this social security number, their debit card number and other card information that is typically requested like security codes, according to BleepingComputer.

An email scam, claiming to be from the American bank, includes a link to what appears to be an authentic-looking website with 'update-citi .com' as the domain address

A Citibank spokesperson told DailyMail.com in an email: 'We encourage our customers to be alert to all types of fraud scams, including suspicious websites and emails, and provide them with detailed information about how to recognize and protect themselves and report such scams.'

'We proactively review customer accounts for fraudulent activity and take appropriate action to protect our customers

The scam uses a TLS certificate for the domain so that a lock appears next to the address, deceiving users into thinking it is a secure website.

'While this should not make a web site appear more legitimate as it only means submitted data is encrypted, for many users a lock symbol tends to lend authenticity to a page,' BleepingComputer said in a blog post.

Once consumers hand over their information, each form is given to the attackers server that will then verify the information is authentic.

Users are asked to provide their full name, address, date of birth, last four digits of this social security number, their debit card…
By Stacy Liberatore For Dailymail.com
Read full article