Go Back   HawaiiThreads.com > Ka Nohona > Circuit Circus
FAQ Members List Social Groups Calendar Search Search Latest Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old June 20th, 2006, 01:37 PM
pzarquon's Avatar
pzarquon pzarquon is offline
Ali`i
 
Join Date: Apr 2004
Location: Honolulu, HI, USA
Posts: 7,307
Send a message via ICQ to pzarquon Send a message via AIM to pzarquon Send a message via MSN to pzarquon Send a message via Yahoo to pzarquon
Exclamation Gone Phishing in Hawaii

A while back, Bank of Hawaii was targeted by phishing scammers. Last year, it was First Hawaiian Bank. While phishing scams are not new, attacks focused on regional banks (rather than big targets like Bank of America or Paypal) are still noteworthy... in part because the scammers seem to be targeting their e-mails at potential victims in the neighborhood of the financial institution.

It's easy to ignore phishing e-mails pretending to be from companies you don't do business with. But as the scammers get more sophisticated and choose smaller targets and get smarter about who they e-mail, you're going to have to be extra careful. The chances you will get a phishing e-mail posing as a company you do do business with are increasing every day.

This week, on more than one of my various e-mail accounts, I've gotten phishing e-mails aimed at Hawaiian Tel Federal Credit Union. Set to appear to be from accounts@htefcu.org with the subject "New regulations placed on visa card usage overseas," it claims my Visa card has been deactivated and that I need to log in to reactivate it. Of course, the link points not to HTFCU, but to a foreign IP address.

I've dropped a note to HTFCU though I'm sure they're aware of it.

Be careful out there!
Reply With Quote
  #2  
Old June 20th, 2006, 02:16 PM
scrivener's Avatar
scrivener scrivener is offline
Ali`i
 
Join Date: Apr 2004
Location: Kapalama Heights.
Posts: 5,189
Send a message via AIM to scrivener Send a message via Yahoo to scrivener
Default Re: Gone Phishing in Hawaii

This isn't fool-proof, but if you keep a separate email just for those businesses you do serious business with (credit cards, banks, utilities), you can usually avoid this as long as you never post that address anywhere on the web or give it out to friends or enemies. I get the ubiquitous PayPal phishing emails all the time, but never, ever at the actual email address I use with PayPal.

By the way, PayPal and eBay ask that you forward phishing emails to spoof@paypal.com and spoof@ebay.com.

And yes. Be careful.
__________________
But I'm disturbed! I'm depressed! I'm inadequate! I GOT IT ALL! (George Costanza)
GrouchyTeacher.com

Last edited by scrivener; June 20th, 2006 at 02:21 PM. Reason: "she's my best friend's girlfriend...but she used to be mine..."
Reply With Quote
  #3  
Old June 20th, 2006, 02:55 PM
tutusue's Avatar
tutusue tutusue is offline
Ali`i
 
Join Date: Sep 2005
Location: Wah-key'-key
Posts: 10,390
Default Re: Gone Phishing in Hawaii

Quote:
Originally Posted by scrivener
This isn't fool-proof, but if you keep a separate email just for those businesses you do serious business with (credit cards, banks, utilities), you can usually avoid this as long as you never post that address anywhere on the web or give it out to friends or enemies.[...]
This is a good idea, Scriv, but I'm wondering...
I pay my credit card online.
I do my banking online.
I use PayPal.
I purchase on eBay and half.com.
All of these require an email address under the 'My Account' section...which means posting that address on their web sites. I guess as long as these companies don't sell their email lists then spam can be kept to a minimum. What's been your experience with this?

BTW...I use one email address for all internet activity, including the above list. When PayPal and eBay spam comes to my other address I know immediately it's fraudulant. Regardless, I consider all requests for account updates, regardless of the source, as fraudulant. Still, I'd like to change to another email address for just the list above but it does involve posting the address to those sites.

As an aside, I purchased a laptop via amazon.com earlier this year using my credit card. As soon as that "large purchase" was posted to my CC account, I received a phone call from the CC company stating: "This is not a telemarketing call, please don't hang up. This is in regard to a large purchase to your account ending in <last 4 numbers>." The customer service rep asked me for no further personal information. She just wanted to verify that I had, indeed, made the purchase. I was extremely grateful for that phone call and told her so! I'm also signed up with that CC to receive email notifications when charges to my account exceed a limit I set. In the case of the laptop I received an email and a phone call.
Reply With Quote
  #4  
Old June 20th, 2006, 03:06 PM
scrivener's Avatar
scrivener scrivener is offline
Ali`i
 
Join Date: Apr 2004
Location: Kapalama Heights.
Posts: 5,189
Send a message via AIM to scrivener Send a message via Yahoo to scrivener
Default Re: Gone Phishing in Hawaii

As long as those email addresses (amazon, paypal, ebay) are never actually displayed for general viewing, you should be fine. I use one email address for paypal and ebay; I use another for amazon, barnes and noble, various mail-order music stores, utilties, credit cards, and banks, and have had no problems SO FAR with any of them. The way these phishers get your email is usually with some kind of spambot, or a program that scours the web for email addresses. Your address is safe at Amazon, because spambots can't see your email address unless they log in as you, which they shouldn't be able to do.

Another way these places can get emails is with spyware or viruses (I may be using the wrong terms here) that get ahold of your address books, especially if you're using Microsoft Outlook. Which is a good enough reason not to, if you ask me.

Another aside: My colleagues were complaining last year about the ton of spam they get in their school email account. I'd never received a single spam email at that address, because I only use it for school-related stuff. I was a little nervous when some students and well-meaning parents would forward me those silly things people forward, with my address going out to all those other people who got the email, but I still never got any spam.

My experiment was to give my email to one reputable business, just to see if privacy policies meant anything to these people. I chose Office Depot, a company I do a lot of business with (heck, I'd have church in there if they'd let me -- I'm a total office-supply junkie!), when I signed up for the Star Teacher program. I get promotional email (so far never very useful to me) from Office Depot every couple of weeks, but so far NOTHING else as a result. I am pleasantly surprised. And still no spam from anywhere in that address.
__________________
But I'm disturbed! I'm depressed! I'm inadequate! I GOT IT ALL! (George Costanza)
GrouchyTeacher.com

Last edited by scrivener; June 20th, 2006 at 03:14 PM. Reason: "tried to be your boy scout, tried to be your ice cream man..."
Reply With Quote
  #5  
Old June 20th, 2006, 11:06 PM
lavagal's Avatar
lavagal lavagal is offline
Ali`i
 
Join Date: Feb 2005
Location: Honolulu, Oahu
Posts: 2,616
Default Re: Gone Phishing in Hawaii

I got the Hawaiian Tel FCU phishing email as well--to my work email, an email address that wasn't in use when I closed my HTFCU account about 8 years ago.

I get paypal phishing all the time. I send everyone of them to the spoof reporting address. I don't care whether a human deals with it or not. My reasoning is that if enough of them get sent to spoof@paypal.com or spoof@ebay.com, then maybe they'll do something about it.

And as many of you have realized, they are looking much more sophisticated. Very well done. I got one with a military pitch and it was very clever.

But what bugs me a lot now is that my cellular phone is getting lots of crap calls.
__________________
Aloha from Lavagal
Reply With Quote
  #6  
Old June 20th, 2006, 11:16 PM
Miulang Miulang is offline
Ali`i
 
Join Date: Aug 2004
Posts: 8,759
Default Re: Gone Phishing in Hawaii

Quote:
Originally Posted by lavagal
I got the Hawaiian Tel FCU phishing email as well--to my work email, an email address that wasn't in use when I closed my HTFCU account about 8 years ago.

I get paypal phishing all the time. I send everyone of them to the spoof reporting address. I don't care whether a human deals with it or not. My reasoning is that if enough of them get sent to spoof@paypal.com or spoof@ebay.com, then maybe they'll do something about it.

And as many of you have realized, they are looking much more sophisticated. Very well done. I got one with a military pitch and it was very clever.

But what bugs me a lot now is that my cellular phone is getting lots of crap calls.
And it's on YOUR dime, too! Did you know that you can register your cellphone number on the national do not call list, just like a landline phone?

It might slow those calls down a bit, especially if you know who's calling, so you can complain to the FTC.

Miulang
Reply With Quote
  #7  
Old June 20th, 2006, 11:46 PM
lavagal's Avatar
lavagal lavagal is offline
Ali`i
 
Join Date: Feb 2005
Location: Honolulu, Oahu
Posts: 2,616
Default Re: Gone Phishing in Hawaii

Mahalo, Miulang. I just signed up our three phone numbers, although I suspect that our home was already on the do-not-call list.

And on a not totally unrelated note: I was preparing to take off on my walk this morning at 4:45 when the phone rang. Wrong number. Some young lady asking for Diane. This was rather a late departure for me by some 10-15 minutes and I was happy to still be home to answer it quickly, although it did wake my husband. Then she called again. Of course I let her have it. Once you get a wrong number between the hours of 10 p.m. and 6 a.m. would it be more trouble to actually open your eyes and pay attention to what you are doing than it is to disturb the slumber of little children and hard working fathers?

I was happy to get home from my power walk to learn that she had not called again.
__________________
Aloha from Lavagal
Reply With Quote
  #8  
Old July 21st, 2006, 01:13 AM
pzarquon's Avatar
pzarquon pzarquon is offline
Ali`i
 
Join Date: Apr 2004
Location: Honolulu, HI, USA
Posts: 7,307
Send a message via ICQ to pzarquon Send a message via AIM to pzarquon Send a message via MSN to pzarquon Send a message via Yahoo to pzarquon
Default Re: Gone Phishing in Hawaii

Another attack is underway. Just got a phishing email in three of my accounts, pretending to be from First Hawaiian Bank. Sent from a fake address, accounts-security@fhb.com, and claiming that someone's futzing around with my account via an ATM, one fun touch is that it includes the statement, "First Hawaiian Bank customers are not held liable for any fraudulent charges to their accounts."
Reply With Quote
  #9  
Old July 21st, 2006, 01:30 AM
lavagal's Avatar
lavagal lavagal is offline
Ali`i
 
Join Date: Feb 2005
Location: Honolulu, Oahu
Posts: 2,616
Default Re: Gone Phishing in Hawaii

Yesterday I got one from Bank of Hawaii. They are well done. I blew it off. If BoH wants to get ahold of me, they can try something other than my email address.
__________________
Aloha from Lavagal
Reply With Quote
  #10  
Old August 15th, 2006, 02:55 PM
pzarquon's Avatar
pzarquon pzarquon is offline
Ali`i
 
Join Date: Apr 2004
Location: Honolulu, HI, USA
Posts: 7,307
Send a message via ICQ to pzarquon Send a message via AIM to pzarquon Send a message via MSN to pzarquon Send a message via Yahoo to pzarquon
Default Re: Gone Phishing in Hawaii

Wow. Phishing scammers have come a long way from going after only the Bank of Americas and Citibanks. I just got a phishing attempt claiming to be from the Kauai Community Federal Credit Union. They even set up an actual fake domain name (rather than feeding victims to obscure sites on Romania or Korea), though they didn't try too hard to make it look like the genuine article.

In fact, the fake domain name's WHOIS record gives what looks like a home address in Freeport, Maine. I can't imagine a scammer being so dense, so I imagine it's faked information (you can list any address with your domain).

I forwarded it to KCFCU's contact address, but thought I'd mention it 'case there are any KCFCU customers here.

Last edited by pzarquon; August 15th, 2006 at 03:19 PM.
Reply With Quote
  #11  
Old August 15th, 2006, 06:37 PM
Hellbent's Avatar
Hellbent Hellbent is offline
Ali`i
 
Join Date: Aug 2004
Posts: 1,042
Default Re: Gone Phishing in Hawaii

There was an article that my bank, Hawaii USA had successfully busted some people last week for phishing scams. I cant seem to find a link, but its nice to know that some people are getting caught or shut down.
__________________
Aquaponics in Paradise !
Reply With Quote
  #12  
Old August 18th, 2006, 12:47 PM
pzarquon's Avatar
pzarquon pzarquon is offline
Ali`i
 
Join Date: Apr 2004
Location: Honolulu, HI, USA
Posts: 7,307
Send a message via ICQ to pzarquon Send a message via AIM to pzarquon Send a message via MSN to pzarquon Send a message via Yahoo to pzarquon
Default Re: Gone Phishing in Hawaii

There was a story on the Hawaii State FCU getting their phishing site taken down, though working toward takedowns are standard operating procedure for all banks. The bigger banks have shut down dozens of fake sites. It's actually catching and prosecuting the folks behind them that's a challenge.

The Advertiser also reported the Kauai Community FCU phishing attack yesterday, with a little more information on the difficulties in prosecuting the fraudsters.

I'm still getting dozens of KCFCU phishing e-mails. As I mentioned above, they're using fully-qualified domain names rather than obscure IP addresses. KCFCU.ORG is the real site for KCFCU, but the phishing e-mails point to KCFCUX.ORG, KAUACU.NET, KCFCUACTIVATE.ORG, and other variations. Even more interestingly, all domains appear to have been registered the day I get the e-mails, and using in-the-clear WHOIS information. The domain owners' names are apparently real people from across the country, but are so random, I'm thinking their names and addresses are just being used arbitrarily... or that they are themselves phishing victims whose stolen financial information is being used to register the domains.
Reply With Quote
  #13  
Old September 15th, 2006, 04:47 PM
1stwahine's Avatar
1stwahine 1stwahine is offline
Ali`i
 
Join Date: Dec 2004
Location: Honolulu, Hawai'i
Posts: 9,517
Default Re: Spam via PM

I juss got this via email Hawaiian Tel Federal Credit Union https://www.htefcu.org/log_into.cfm

Due to concerns, for the safety and integrity of the Hawaiian Tel Federal Credit Union
account we have issued this warning message.

It has come to our attention that your Hawaiian Tel Federal Credit Union account information needs to be
updated as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. If you could please take 5-10 minutes
out of your online experience and update your personal records you will not run into
any future problems with the online service.


I am not a member of Hawaiian Tel Federal Credit Union.

Be careful.

Auntie Lynn
__________________
Be AKAMAI ~ KOKUA Hawai`i!
Philippians 4:13 --- I can do all things through Christ who strengthens me.

Last edited by 1stwahine; September 15th, 2006 at 05:13 PM.
Reply With Quote
  #14  
Old September 20th, 2006, 12:15 PM
pzarquon's Avatar
pzarquon pzarquon is offline
Ali`i
 
Join Date: Apr 2004
Location: Honolulu, HI, USA
Posts: 7,307
Send a message via ICQ to pzarquon Send a message via AIM to pzarquon Send a message via MSN to pzarquon Send a message via Yahoo to pzarquon
Default Re: Gone Phishing in Hawaii

In my inbox right now, simultaneous phishing attacks on Hawaiian Tel FCU, Honolulu FCU, and Hickam FCU. Suddenly, the islands are a pretty hot target for scammers.
Reply With Quote
  #15  
Old September 20th, 2006, 02:17 PM
Adri's Avatar
Adri Adri is offline
Ali`i
 
Join Date: Mar 2006
Posts: 1,444
Default Re: Gone Phishing in Hawaii

I got a couple purportedly from the Kauai Community Federal Credit Union. I deleted without even opening it. I thought it was weird because what are the chances that most people on Oahu would have a Kauai FCU account?
Reply With Quote
  #16  
Old September 20th, 2006, 02:21 PM
pzarquon's Avatar
pzarquon pzarquon is offline
Ali`i
 
Join Date: Apr 2004
Location: Honolulu, HI, USA
Posts: 7,307
Send a message via ICQ to pzarquon Send a message via AIM to pzarquon Send a message via MSN to pzarquon Send a message via Yahoo to pzarquon
Default Re: Gone Phishing in Hawaii

Well, phishing success rates are near five percent, so the chances are obviously good enough.

In fact, these regionally targeted attacks (a.k.a. "puddle phishing") are a sign of the scammers getting more sophisticated. As I mentioned, they could send a million phishing messages purporting to be Bank of America, but BoA customers are used to this stuff and not everyone is a BoA member. Now, they're culling databases specifically for addresses in Hawaii, and sending Hawaii-specific phishing attacks.

Sure, not everyone is a HiTel FCU or Kauai FCU or First Hawaiian Bank customer... but already you might give their message more attention because it seems more likely to be legitimate to you as a Hawaii resident.
Reply With Quote
  #17  
Old September 20th, 2006, 02:41 PM
1stwahine's Avatar
1stwahine 1stwahine is offline
Ali`i
 
Join Date: Dec 2004
Location: Honolulu, Hawai'i
Posts: 9,517
Default Re: Gone Phishing in Hawaii

heheheh.

I got the Hickim FCU as well. I thought it was for my daughter. I called her up and said her account has been locked! She told me it was a "phishing attack and I got fooled!

Dang!

Make A.

Wea can I go for give Whack Whacks?

Auntie Lynn
__________________
Be AKAMAI ~ KOKUA Hawai`i!
Philippians 4:13 --- I can do all things through Christ who strengthens me.
Reply With Quote
  #18  
Old October 2nd, 2006, 01:57 PM
tutusue's Avatar
tutusue tutusue is offline
Ali`i
 
Join Date: Sep 2005
Location: Wah-key'-key
Posts: 10,390
Default Re: Gone Phishing in Hawaii

Quote:
Originally Posted by pzarquon View Post
In my inbox right now, simultaneous phishing attacks on Hawaiian Tel FCU, Honolulu FCU, and Hickam FCU. Suddenly, the islands are a pretty hot target for scammers.
...and getting hotter.

I received the following email this morning. All went to my primary email address, not the one I use for web purchases, subscriptions and registrations.
Kauai Community FCU Message
Hawaii State Federal CU Important Update
Hawaii State Federal CU Important Update
Pearl Harbor FCU Important UPDATE
Honolulu City & County Employees FCU Important
Pearl Harbor FCU Important UPDATE
Pearl Harbor FCU Important Notification
Honolulu City & County Employees FCU Important
Reply With Quote
  #19  
Old October 2nd, 2006, 02:04 PM
Lei Liko's Avatar
Lei Liko Lei Liko is offline
Ali`i
 
Join Date: Apr 2006
Location: On a psycho-tropical vacation avoiding rehab.
Posts: 1,341
Default Re: Gone Phishing in Hawaii

I must have received 2930428342098374927834 Hawaii State FCU emails last week -- one even went to my work address, and that's an email that I only use for internal business stuff!

This morning I got the Pearl Harbor FCU email at my personal address for the first time.
__________________
Tessie, "Nuf Ced" McGreevey shouted
We're not here to mess around
Boston, you know we love you madly
Hear the crowd roar to your sound
Don't blame us if we ever doubt you
You know we couldn't live without you
Tessie, you are the only only only
Reply With Quote
  #20  
Old October 2nd, 2006, 03:18 PM
hawaiidreamin's Avatar
hawaiidreamin hawaiidreamin is offline
Luna
 
Join Date: Sep 2006
Posts: 139
Default Re: Gone Phishing in Hawaii

I have gotten phishy e-mails from all the companies you all have mentioned above. Since I have never, ever had an account with any of these companies-and I don't live in Hawaii-I know them to be scams instantly. It just puzzles me since the e-mail address that I get these phishy e-mails are not registered at any Hawaii related sites I visit.
__________________
Hawaii my love, I will see you soon
Reply With Quote
  #21  
Old October 8th, 2006, 08:30 PM
Leo Lakio Leo Lakio is offline
Ali`i
 
Join Date: Aug 2005
Posts: 9,558
Default Re: Gone Phishing in Hawaii

Quote:
Originally Posted by Lei Liko View Post
I must have received 2930428342098374927834 Hawaii State FCU emails last week
In one of my personal e-mail accounts, I've started getting HSFCU phish messages every day for the past week - of course, I'm not in Hawai`i, nor do I have an account there.
Reply With Quote
  #22  
Old October 8th, 2006, 08:46 PM
Lei Liko's Avatar
Lei Liko Lei Liko is offline
Ali`i
 
Join Date: Apr 2006
Location: On a psycho-tropical vacation avoiding rehab.
Posts: 1,341
Default Re: Gone Phishing in Hawaii

Quote:
Originally Posted by Leo Lakio View Post
In one of my personal e-mail accounts, I've started getting HSFCU phish messages every day for the past week - of course, I'm not in Hawai`i, nor do I have an account there.
I don't have any account with a FCU, period!

I have a question regarding this phishing emails and gmail, though. In gmail, under More Options there's a button to press to report the email. I know that officials are doing their best to track these suckers down.

So I've been reporting them for a good month or so now, and it's just annoying. Should I keep on reporting them or should I just mark them as SPAM so it goes directly to my SPAM folder instead of my inbox?
__________________
Tessie, "Nuf Ced" McGreevey shouted
We're not here to mess around
Boston, you know we love you madly
Hear the crowd roar to your sound
Don't blame us if we ever doubt you
You know we couldn't live without you
Tessie, you are the only only only
Reply With Quote
  #23  
Old October 8th, 2006, 09:05 PM
Konaguy's Avatar
Konaguy Konaguy is offline
Ali`i
 
Join Date: Aug 2004
Location: Kailua-Kona
Posts: 2,640
Default Re: Gone Phishing in Hawaii

Keep on reporting them. As these e-mails are probably coming from many
different zombie computers. It takes awhile to get them all shutdown.
__________________
Check out my blog on Kona issues :
The Kona Blog
Reply With Quote
  #24  
Old October 8th, 2006, 09:39 PM
tutusue's Avatar
tutusue tutusue is offline
Ali`i
 
Join Date: Sep 2005
Location: Wah-key'-key
Posts: 10,390
Default Re: Gone Phishing in Hawaii

Quote:
Originally Posted by Leo Lakio View Post
In one of my personal e-mail accounts, I've started getting HSFCU phish messages every day for the past week - of course, I'm not in Hawai`i, nor do I have an account there.
I'm receiving up to 8 HSFCU emails per day. I have them filtered to the trash.
Reply With Quote
  #25  
Old October 8th, 2006, 09:49 PM
damontucker damontucker is offline
Banned
 
Join Date: Jul 2005
Posts: 3,928
Default Re: Gone Phishing in Hawaii

Quote:
Originally Posted by tutusue View Post
I'm receiving up to 8 HSFCU emails per day. I have them filtered to the trash.
depending on what Email program you are using... you can probably block all email that comes from that sender or it's domain.

Question Tutu... is this the same email that you used for your craigslist correspondence?
Reply With Quote
Reply

Bookmarks

Tags
crime, fraud, phishing, theft

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -5. The time now is 07:46 PM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2019, vBulletin Solutions Inc.

  Partner Sites: Hawaii Blog Hawaii News Hawaii Grinds Hawaii Social Media  
    Blogging the Aloha State. The Hawaii Star. Hawaii Food Blog. The story of Aloha 2.0.