Fraudulent Citibank Phishing Email Not From CitiBusiness Online

Subject: customer alert [message id: 1 7-1]

Dear business customer of Citibank:

Citibank is committed to safeguarding customer information and combating fraud. We have implemented industry leading security initiatives, and our online banking services are protected by the strongest encryption methods and security protocols available. We continue to develop new solutions to provide our online banking services and their customers with confidence and security.

The added security measures require all CitiBusiness Online customers to complete on a regular basis CitiBusiness Form.

Please use the hyperlink below to access CitiBusiness Form:

http:// [ citibusinessonline.da-us.citibank [dot] com ]

Thank you for banking with us!

Citibank Customer Support

………………………………..

0×85476372, 0×372, 0×876, 0×87, 0×30, 0×3, 0×114, 0×5937, 0×1600, 0×630, 0×53218724, 0×63826927, 0×83, 0×97, 0×411 HES, HZX, tmp, J4R, CWD, NLF, define, rcs. NV9G: 0×95, 0×591, 0×66372281, 0×7 0×43 include: 0×6, 0×2, 0×389, 0×12, 0×80, 0×020, 0×722, 0×2, 0×1 0×82, 0×6616, 0×45, 0×19 OPQ: 0×3175, 0×20, 0×20, 0×9, 0×1944, 0×95, 0×447, 0×85584856 media: 0×33211754, 0×947, 0×2624, 0×49453782 0×6, 0×02, 0×9, 0×96657831, 0×0065, 0×4426, 0×133, 0×54707646, 0×97270686, 0×59, 0×40761072, 0×3, 0×92, 0×675

0×5675, 0×995, 0×642, 0×51966238, 0×3, 0×4533, 0×65420499 close: 0×426, 0×73, 0×32, 0×331, 0×15, 0×6335, 0×304, 0×143, 0×6, 0×3, 0×7, 0×50209829, 0×22362027, 0×933 0×671, 0×20, 0×426, 0×45, 0×41625054, 0×0, 0×406, 0×2, 0×38087192, 0×226, 0×5, 0×881, 0×9845 type. KQUV: 0×9, 0×7, 0×30, 0×25628521, 0×80, 0×09, 0×2, 0×52056644, 0×9674, 0×058, 0×81847325, 0×44182924 interface: 0×5, 0×1901, 0×13, 0×33489949, 0×91516094, 0×59159582, 0×66, 0×782, 0×3291, 0×372, 0×66853213, 0×4255, 0×5828, 0×0644, 0×35 J12 end 14W 3FA DBJS: 0×984, 0×92, 0×69032352, 0×77, 0×70, 0×83, 0×30, 0×7975, 0×0321, 0×656, 0×1, 0×201, 0×3, 0×55 YIKH: 0×85, 0×6640, 0×762, 0×7770, 0×9, 0×6734, 0×0828, 0×9, 0×95, 0×57762806 CZ3: 0×24, 0×0, 0×970, 0×6, 0×08178691, 0×0, 0×00, 0×5, 0×27, 0×9, 0×1600, 0×9293, 0×8, 0×37101767, 0×40769869

4S8: 0×4598, 0×67, 0×7, 0×62933168, 0×96, 0×37781851, 0×52166452, 0×55, 0×525, 0×3, 0×94, 0×570, 0×458 EB4: 0×162, 0×56 0×7, 0×56, 0×84293268, 0×7, 0×17987411 3SA: 0×86634265, 0×9, 0×497, 0×7, 0×90177617, 0×3, 0×000, 0×4, 0×920, 0×1, 0×404, 0×61, 0×26, 0×7177, 0×33 L9T1 F9X source QJ5I DPTH ZADS engine hex. exe: 0×13818861, 0×0388, 0×16137916, 0×6568, 0×4261, 0×4, 0×35560148, 0×15897890, 0×55, 0×1 0×1, 0×001, 0×667, 0×89, 0×6, 0×32, 0×8, 0×6713, 0×1057, 0×8836, 0×1, 0×6881 0×90, 0×239, 0×479, 0×534, 0×3597, 0×0, 0×5284, 0×59 tmp, EP7O, revision, GQNU, 38F7, QSD, XKE5, MZSB. 0×42903654, 0×3, 0×58, 0×72216481, 0×16563984, 0×451

ADMIN NOTE:
The above email may look legitimate, but it’s not. Two dead giveaways (which you can’t see) are;

1. The link you see is actually pointed to a sub-domain on “port54 [dot] tw”. (You need to view the raw source code to see it). If you were to try going to the location spelled out in the link, it would lead you nowhere.
2. See all those weird number combinations. No legitimate email would have those. And the reason you can’t see them is because the spammer has colored the text white so it won’t show up on the white background of your email.

Technorati Tags: Citibank, Citibank Customer Support, CitiBusiness Online, phishing scam, spam email

Citibank is committed to safeguarding customer information and combating fraud. We have implemented industry leading security initiatives, and our online banking services are protected by the strongest encryption methods and security protocols available. We continue to develop new solutions to provide our online banking services and their customers with confidence and security.