PHISHING ALERT
An e-mail claiming to be from one of our financial service providers has been sent to random e-mail addresses, some of which were our customers. This is a phishing scam. Please be assured City National will never ask for or transmit account information via regular e-mail. One version of the e-mail in question pretends to be from Digital Insight with "Update Your Account" in the subject line. Please delete this e-mail and do not respond or visit the link it contains. City National is investigating the matter. Thank you for your prompt attention.
Dear Digital Insight Client,
Digital Insight would like to warn you about a current phishing scam directed at Digital Insight client financial institutions and their end users. This scam targets users by sending emails that appear to be from an official Digital Insight source (for example, “Digital Insight Customer Care,” “Digital Insight Administration,” etc.), and is designed to trick the recipient into clicking a link in the e-mail for the purpose of acquiring sensitive data, such as passwords or financial information. Be aware that theemails may also contain the names of different banks.
Users should be advisedto NEVER click links or install programs suggested in emails, even if the email appears to be from an official or familiar source. Digital Insight will never send client emails containing links to download software or applications.
-- Sample Phishing Email No. 1 --
From: "customer-care@digitalinsight.com" <administration@digitallnsight.com>
Date: July 16, 2008
To: <name>
Subject: Attention - Important Notification!
Dear Administrator,
We inform you that your account is about to expire. It is strongly recommended to update it immediately. Update form is located here. However, failure to confirm your records may result in account suspension
-- Sample Phishing Email No. 2 --
From: administration@XYZbank.digitalinsight.com [mailto:administration@xyzbank.digitalinsight.com]
Sent: Tuesday, October 07, 2008 5:07 AM
To: Doe, John
Subject: Attention - Important Customer Notification **
As an XYZ Bank customer, your privacy and security is a primary task for us. We have been dedicated to customer safety and protection and our mission remains as strong as ever.
We inform you that your eBusiness Banking account is about to expire. It is strongly recommended to update it immediately. Update form is located here:
http://www.securexyzbankmi.com/onlineserv/CM
However, failure to confirm your records may result in account suspension.
This is an automated message. Please do not reply.
Sincerely, XYZ Bank Administration
-- Sample Phishing Email No. 3 --
E-mail Subject: Cash/Treasury Management Online Service Notice
Dear Cash Management Online User,
Following a recent ssl server and website upgrade, The Cash Management Online Security Department requests you to start the client data confirmation procedure. Clicking on the link at the bottom of this letter will take you directly to the confirmation procedure page.
The following steps are to be taken by all Cash Management and Treasury Management Online service users and are mandatory to avoid online access suspension. This includes all business online banking and commercial online banking customers of the bank including ach and payroll online users.
Click here <hostile url> to start the confirmation procedure
The cash/treasury management online users have been upgraded to a dedicated server and website. After the above procedure, an e-mail will be sent to you containing details of the upgraded website and protocols. You are herby advised to do this immediately to avoid total online access suspension
The Cash/Treasury Management Security Department apologizes for the inconveniences caused to you, and is very grateful for your cooperation.
Cash/Treasury Management Online Security Department
The emails described above are not from Digital Insight. Users should be advised to immediately delete emails such as these, and be careful not to take the actions requested.
If you have questions about this, or wish to report what you believe to be a phishing incident, please contact your City National Bank Account Manager, or contact City National Bank Customer Service: 305-349-5490 / support@citynational.com
