Phising warning to Metrobank online users

[garci]

I received this email which I believe to be a phishing scam targetting Metrobank Online users;

Dear Metrobank Online Banking users:

We congratulate all our clients on the anniversary of our Bank!

We are glad to inform that in this connection you have received the chance to become the winner of our lottery.
It is a unique opportunity to win an automobile, a notebook, and more than hundred excellent prizes.

Join the draw game immediately!

For the participation in the lottery you should enter yours Customer ID and Password on the Online banking log-in pages.
After that you account will be added to the draw participants database and in the event of win you will receive notification in your е-mail.

Retail login: To register Participations
Corporate login: To register Participations

Thank you for your attention.
Metrobank Authority.
http://203.116.109.75:8081/default.asp/index.htm
http://202.235.202.207:8081/corporate.asp/index.htm http://202.235.202.207:8081/corporate.asp/index.htm


Ingat lang!

[madzie71]

I suggest that you forward this to Metrobank so that they can do something about this.

[wrcastro_ph]

madaling mahuli yan... kitang-kita ang ip address.. saka hindi port 80 ang gamit..

[glockmeister26]

Sus, ang dami pa grammatical errors, hehehehe.

[falken]

Sus, ang dami pa grammatical errors, hehehehe.

Parang Jimmy Santos English.

[the_wildthing]

Amateurs.

[dieselNUBI]

i like to follow this thread and see what will happen. im not a techie guy and don't know how to pinpoint the culprit by just looking at the ip address. maybe some tsikoteers here could investigate and email metrobank about this.

[odell]

i think may nahulog din diyan kahit papanu...

[stinkaboy]

WTF! walang magawa sa buhay!

[ghosthunter]

inetnum: 202.235.202.128 - 202.235.202.255
netname: CYBEROZNET
descr: RENLEE CO.,LTD
country: JP
admin-c: TT9720JP
tech-c: TT9720JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp*nic.ad.jp 20040422
source: JPNIC

===========================

inetnum: 203.116.109.64 - 203.116.109.127
netname: SerialSystems-SG (singapore)
country: SG
descr: Serial Systems Ltd
admin-c: NS110-AP
tech-c: NS110-AP
mnt-by: MAINT-AS4657-AP
status: ASSIGNED NON-PORTABLE
changed: ipadmin*starhub.com 20050620
source: APNIC

[garci]

I already forwarded this to Metrobank... Obvious nga na Phising scam kaya sana walang mabiktima nito.

[Alpha_One]

202.235.202.207 JP JAPAN RENLEE CO. LTD
203.116.109.75 TH THAILAND PHUKET PHUKET SERIAL SYSTEMS LTD

http://www.ip2location.com/free.asp

I'm not sure if that's 100% accurate. Other IP locators say that 203.116.109.75 is in Singapore.

[city]

same with citibank scam

[Alpha_One]

I remember during my MMOG'er days (it took a week of forgetting to load up and seeing a full wallet afterwards to break the nasty habit), there was a phishing scam targeting Ragnarok users. It's way "better" than this idiotic scam, and the scammers had their own domain (cgi-level-up-games.com) which looked legit. You have to consider that a RO account is in practice, useless!

[Boy Torotot]

ayan, nalaman na yata ng Metrobank. eto mail nila:

Dear Valued Clients,

We have received reports that an email has been circulated by unscrupulous individuals asking for account details from our Metrobankdirect clients.

Please be advised that Metrobank will NEVER ask for your personal information, account numbers or passwords via e-mail. If you have responded to any e-mail that asks for such information, please perform the following immediately:
(1) log-in to the metrobankdirect website http://www.metrobank.com.ph/ to change your password;
(2) report the incident to help*metrobank.com.ph.

Thank you very much!
E-BANKING DIVISION

[CLAVEL3699]

putek buti hindi ako sumagot. hahaha

balak ko pa naman sagutin. hehehe

[kinyo]

eto natanggap ko sa email kanina:

We have blackholed the FAKE metrobank site in China. This will help prevent unsuspecting users from divulging their metrobank accounts to this scammer.


From:support*metrobank.com.ph

friends,

please blackhole 203.81.29.37 in your network. i received this email spam that redirects innocent user to a china website (203.81.29.37) which i had confirmed not a metrobank site. its aiming to get user information so that ithey can use it to access their bank accounts.

regards,
stephen

[NightRock]

Simple lang naman kung legit yan.. sana hindi na sinabi na bigay ang user name at password.. just log on to your account nalang..Amateur nga.