[AusNOG] Phishing attempt using an Australian bank account

[Matt Walker]

Had a similar event recently, phishing email using a Bank of QLD account based on the BSB lookup

I reported it to ACSC as well as called BoQ to report it and they froze the account until the owner could be contacted etc. I did sent screenshots of the SMS to BoQ so they could confirm it also.

Hope this helps
Matt


On 20 Dec 2022, at 11:00, Giles Pollock <glp71s at gmail.com> wrote:


First port of call would probably be the bank in question... Look up the BSB using something like https://bsb.auspaynet.com.au/ then either call that specific branch or the fraud prevention team at that specific bank. They should be able to take it from there...

On Tue, Dec 20, 2022 at 9:29 AM Graham Maltby <graham at maltby.id.au<mailto:graham at maltby.id.au>> wrote:
Hi all,

I have a client who is the victim/target of a phishing attempt - simple social engineering with a request to update banking details and pay outstanding invoices. The provided details are for an Australian Bank (BSB and account number).

Who is the correct authority to direct this to?
Do banks generally respond to this sort of thing where (they are not implicated nor do I have any authority over the target account)?

I have already reported it to the registrar that registered the bogus domain.

Any other advice?

Cheers,
Graham


_______________________________________________
AusNOG mailing list
AusNOG at ausnog.net<mailto:AusNOG at ausnog.net>
https://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20221220/ab0c8c81/attachment.htm>