Online Security Sticky
Mon, 1 Oct 2009
RHB Spoof Website Discovered
To all RHB customers, please do not respond to the fake RHB website with the URL http://www.rhbbg.com/. RHB do not have such URL website. Kindly be informed that the websites valid within RHB Banking Group are: For more information on how to prevent yourself from entering a spoof website, click here
Mon, 17 Aug 2009
Misuse of RHB Banking Group Sender Information

To all RHB customers, kindly be aware of the latest email scam that misuses RHB Head of Retail Banking, Mr. Renzo Viegas’s name as the email sender. RHB Banking Group did not and will not send out scam emails such as below:

-----Original Message-----
From: info@rbs-onlineservices.com
Sent: Thu, 13 Aug 2009 15:34:53 +0000
Subject: A/C Activation with RHB Banking Group

Dear Sir/Madam,

A/C Activation with RHB Banking Group.

We send you Compliments and Greeting from the RHB Banking Group.

As per your email, note that we have already been informed by the Asia Power Ball Lottery Commission to credit your offshore account with the sum of Two Million Five Hundred Thousand United State Dollars ($2,500,000.00 USD) which represents your Lottery proceed.

As you may have been informed, we can not effect the transfer of your funds directly unless you activate a Non-Residence account with us. This is due to the fact that your winning prize is currently been deposited in a suspense account by our client the Asia Power Ball Lottery Commission.

Note that we operate four (4) different type of personal/non-residence account and they are as stated below:

1. Regular Checking Account.

To activate the Regular Checking Account with us, you will be required to make an Initial Account Deposit, IAD, of $1,305 USD (One Thousand Three Hundred and Five United State Dollars). If you choose to activate the Regular Checking Account with us, note that your winning prize will be transferred to your designated account in your country in five (5) installments. In the Regular Checking Account, the maximum amount that can be transferred out of your account within a month is $500,000.00 (Five Hundred Thousand United State Dollars). This means your winning prize will be transferred to you in five (5) different months starting from the day your account is activated.

2. Daily Checking Account.

To activate the Daily Checking Account with us, you will be required to make an Initial Account Deposit, IAD, of $2,500 (Two Thousand Five Hundred United State Dollars). If you choose to activate Daily Checking Account with us, note that your winning prize will be transferred to your designated account in your country in three (3) installments. In the Daily Checking Account, the maximum amount that can be transferred out of your account within a month is $1,000,000.00 (One Million United State Dollars). This means your winning prize will be transferred to you in three (3) different months starting from the day your account is activated.

3. Premium Account.

To activate the Premium Account with us, you will be required to make an Initial Account Deposit, IAD, of $3,500 (Three Thousand Five Hundred United State Dollars). If you choose to activate Premium Account with us, note that your winning prize will be transferred to your designated account in your country in two (2) installments. In the Premium Account, the maximum amount that can be transferred out of your account within a month is $1,500,000.00 (One Million Five Hundred Thousand United State Dollars). This means your winning prize will be transferred to you in two (2) different months starting from the day your account is activated.

4. Platinum Account.

To activate the Platinum Account with us, you will be required to make an Initial Account Deposit, IAD, of $5,000 (Five Thousand United State Dollars). If you choose to activate Platinum Account with us, note that your winning prize will be transferred to your designated account in your country in full. In the Platinum Account, transfers of funds are unlimited. If you choose to activate the Platinum Account your winning prize will be transferred to you in full as soon as you activate your account.

Please go through the account options given above and let us know which of the account listed above will be capable/convenient for you to operate with us.

We imply you to activate an account with us and be rest assured that we will give you the best of our services as we hold our customer's in high esteem.

Once Again, Thanks for contacting the RHB BANKING GROUP.

We will appreciate your prompt response to this mail.

Best Regards,
Mr. Renzo Viegas
Head of Retail Banking and Offshore Accounts
RHB Banking Group
25 & 27, Jalan Pudu, 55100 Kuala Lumpur,
Malaysia.
Tel/Fax: +601 664 642 41
E-Mail: info@rbs-onlineservices.com

Please do not respond to any suspicious emails that require you to reveal your personal banking information ie. Personal details, bank account no. and PIN no. The bank will never request for these banking information through emails.

If you have responded to the scam e-mail, kindly contact our Customer Care immediately at +603 9206 8228 (WM) or +6082 276 118 (EM).

Wed, 15 July 2009
Phishing email targetting credit card owners

To all MasterCard users, kindly be aware of any scam emails claimed to be sent from MasterCard Support team such as below. It may lead you to a fake MasterCard website to phish for your personal information!

-----Original Message-----
From: MasterCard Support <service@mc-au.com>
Sent: Tue, 14 Jul 2009 16:58:29 -0400
Subject: Online Banking Notification

Dear member,

We have recently updated our Online system to include new layer secure authentication. This is intended to provide you with the best security possible when accessing your account.

You will need to update your account in order to continue using your card.

MasterCard Update

Scam linkage detected:
<http://www.mc-australia.com/index.php?id=41364>. Please do not respond to any information from this site.

Your ticket code is MC009382.

We apologize for any inconvenience this may cause and appreciate your patience and understanding.

If you have responded to the scam site, kindly contact our Customer Care immediately at +603 9206 8228 (WM)
or +6082 276 118 (EM).

Mon, 18 May 2009
Phishing Email with Scam Linkage Found

If you have recently received any email from RHB, kindly be aware of the scam linkage given in the email. It may lead you to a fake RHB website to phish for your personal information!

Below is a sample of phishing email:

 

-----Original Message-----
From: ibanksupport
Sent: Wednesday, May 13, 2009 4:33 PM
Subject: Urgent Notice

At RHB Bank, we believe in offering the truly captivating products. This starts with our attractive savings rates and continues with our exceptional customer service. We have initiated a new security process to your internet banking for safety purpose

You must authenticate your RHB Bank account session before you can proceed. This will only take a few moments. Thank you.

Authenticate Now

Scam linkage detected: <http://www.dbhclan.org/backup/file/restore.php>. Please do not respond to any information from this site.


Thank you,
RHB Bank Security Advisor.

 

If you have responded to the scam site, kindly contact our Customer Care immediately at +603 9206 8228 (WM)
or +6082 276 118 (EM).

Thu, 16 Apr 2009
Beware of Fraudulent SMS and Telephone Calls Requesting Confirmation on Credit Card Transactions

Bank Negara Malaysia would like to caution members of the public to be vigilant when receiving any calls or SMS claiming that it is from BanK Negara Malaysia or any commercial banks.

The Facts are:

  • There is no department called "Unit Kad Kredit Palsu" in Bank Negara Malaysia
  • 8659-XXXX is not a Bank Negara Malaysia telephone line
  • Bank Negara Malaysia will NEVER request for personal banking information through SMS or telephone calls.

Based on recent complaints received by Bank Negara Malaysia, there has been an increase in incidents of fraudsters making such calls and sending SMS to unknowing members of the public in order to fraudulently obtain their personal banking information, with the aim or siphoning monies from one's account.

From Bank Negara Malaysia's investigations, the modus operand of the scam is as follows:

  1. Victim receives SMS or telephone call: Requesting victim to confirm a credit card transaction for the purchase of goods or services purportedly charged to the victim's credit card.
  2. When victim calls the telephone number provided in the SMS, the fraudsters identify themselves as agents of a commercial bank, and again, ask the victim to confirm whether the credit card transaction had taken place.
  3. When victim informs the fraudster that he has no such credit card or transaction, the fraudster will start to sound concerned and will advice victim to lodge a report with Bank Negara Malaysia's "Unit Kad Kredit Palsu". or with the commercial bank's "credit card management department". The fraudster will provide the victim with the telephone number for the "Unit Kad Kredit Palsu".
  4. When victim calls the telephone number provided, they are greeted by a automated voice message which identifies the company as Bank Negara Malaysia, and the call will then be answered by someone claiming to be Bank Negara Malaysia officer. This office will request for information relating to the victim's banking and credit card accounts under the pretense of lodging a complaint on behalf of the victim.
  5. The fraudsters now have sufficient information to illegally transfer funds out of the victim's bank account.

Members of the public are reminded not to disclose their personal banking information to any unknown party without verification.

For further information, enquiries or complaints, members of the public may contact or visit:

BNMTELELINK (Customer Contact Centre)
Tel: 1-388-88-5465
Fax: (03)2174 1515
Email: bnmtelelink@bnm.gov.my

BNMLINK (Walk-in Customer Services Centre)
Block D. Bank Negara Malaysia
Jalan Dato' Onn
5048O Kuala Lumpur
(Business Hours Monday- Fiday. 9 00 am- 5 00 pm)

ABMConnect (Hotline to Association of Banks in Malaysia)
Tel: 1-300-86-9980

Bank Negara Malaysia
7 April 2009

Tue, 07 Apr 2009
New Phishing Website Found

We have received reports that a group posing under the name "RHB", claiming to be a subsidiary of the RHB Banking Group.

Fake websites found as of 7 April 2009:

  • http://dsl-217-155-36-180.zen.co.uk/logon/rhbbank.com.my
  • http://voyagertravel2.dsl.xmission.com
  • www.rhbbankberhad.net
  • www.rhbfinance.org
  • www.rhbsecuritie.com
  • www.rhbsecurities.com
  • www.rhbsecuritiesltd.com

Please note that we at RHB, DO NOT have any connection to this party whatsoever, neither are they a subsidiary of the RHB Group.

Thus any claims from this party are invalid and we advice all our clients and users to be aware of such claims from any websites, other than the ones under the RHB Group.

If you have encountered any potential scam, illegal activities or phishing sites, please report to us immediately.

For RHB Internet Banking:
Call Customer Care at +603 9206 8228 / +6082 276 118 or email to ibanksupport@rhbbank.com.my

For RHB Invest:
Call RHB Invest Team at +603 9205 1300 or email to enquiry@rhbinvestmentbank.com or rhbinvest@rhbinvestmentbank.com

Thu, 08 Jan 2009
Download Microsoft Security Update MS08-67 for your PC Protection

Currently, there have been many cases reported of a worm attack known as WORM_DOWNAD which exploits Microsoft Windows Operating System (MS08-67) vulnerability. The worm would cause your computer to experience exceptionally slow response and poor system performance. In addition, you may also have problems accessing websites.

As a preventive measurement or if you’re already affected, you are advised to equip your computer with Microsoft Security Update MS08-67 which can be downloaded from Microsoft website. Also, always ensure that your anti-virus software is running with the latest virus pattern.