PNB phishing email designed to steal user credentials

MUMBAI. INDIA: Websense Security Labs has come across a phishing email targeting customers of Punjab National Bank, one of the largest nationalised Indian banks, seeking to obtain password credentials of corporate as well as individual customers.

This phishing campaign requires the recipient to open an email attachment and fill in the required fields including: user ID, Password, transaction password and mobile number. Once completed the form redirects customers to the legitimate bank site while their personal information including password credentials are sent to a server under the attacker's control.

Websense proactively blocks this phishing campaign using ACE, our Advanced Classification Engine, at multiple stages of the attack chain.