We have been made aware of a fake TSB bank website [ disproquim.com.ec ] this website link has been sent to users via e-mail. The web link been sent out is https://disproquim.com.ec/temp/personal/internetbanking.tsb.co.uk/ (do not visit this link it is malicious)
At the time of testing this the webpage was unavailable, but this does not mean it is safe to visit.
The domain disproquim.com.ec could have been hacked in order to present the fake TSB login page.
We suspect the reason for the e-mail is to collect user login details, and possibly infect the user with malware/virus.
The e-mail appears to be from [email protected] and was sent to [email protected] when we look a bit deeper we find the real address may be [email protected] and this email was sent by Microsoft Outlook Express.
Here is the text of the e-mail sent out :-
|We are contacting you today as you have not updated any of your personal details for some time as a security measure we have disabled online access to your account.|
|TSB Bank use a multi-layered approach to preventing fraud and have implemented industry-leading fraud prevention tools to detect and prevent fraudulent transactions. We also feel that a vital fraud prevention measure is to educate our customers about fraud, give you assurance that we are protecting you, and give you tips on how you can prevent fraudsters from targeting you.|
|In order for us to safeguard your account information it is vital we hold the most up to date details regarding our customers. To restore access please click the link below to validate your information, this process should only take you a few minutes to complete.|
|Restore Access ⇨ (this takes you to the malicious link)|
|Please Note: Failure to restore full access can lead to permanent suspension of access to our online banking service.|
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.