Alert : CIMB-clicks phishing e-mail on the loose
filed in Today's World, computer security, investment & finance, life hacks, link and info sharing, make money, malaysia today, malaysiakini, my life, pictures, tutorials on Dec.08, 2008
Actually I want to publish more on how to get more traffic to your blog/site series but since I’m in holiday mode, let’s just say I’ll hold it off for a while. Another reason is there’s another important thing to publish today and shared with all my readers. So in case you missed my previous 2 post on how to get more traffic your blog or site, you can refer to the links below:
The important thing that I want to share is recently there’s a circulation of phishing email on CIMB-clicks. The emails were sent randomly to email addresses and maybe you will find it in your inbox. Here’s the screenshot of the email that has been sent to a friend of mine.
Quick tips in identifying phishing emails:
- the email tend to force someone to access their account quickly by using scare tactics
- the email will ask you to click the link in the email
- phishing emails usually using technical jargons that might not be known to less IT savvy people.
- the email will try to blackmail or deceive you with their words such as account will be suspended if you don’t act now by clicking the links given.
I will not talk more on identifying phishing websites or any tips to prevent you from falling to phishing sites for now because somebody might have fallen to this kind of scam at the very moment. Maybe I’ll leave to to some other time if anyone wants to know. To keep things simple, I’ll just talk on what to do if you think your account have been compromised.
So what to do if you’ve fallen to phishing sites’ trap?
- Call the bank directly and ask to cancel your online account.
- If you still manage to get into your account, change the password, email, secret answers in case you forgot your password and other security related information on the online banking page.
- Make a police report describing your situation so that a public warning can be issues and the phishing site can be blocked. This is also important so that police can open an investigation on the issue at hand
- If you’re using multiple online banking and the same password, please login to the other online bankings and change your password and secret answers. It’s preferable if you cancel it too. The scammers can easily make their way through social engineering if they already have your sensitive information and important credentials.
I think that should be enough for you to get a head start. The faster you act, the faster you will save your money and your own time to make things right again. Please spread the love and god bless.
p/s : To all muslim friends, Selamat Hari Raya Aidiladha. ![]()




December 9th, 2008 on 2:58 am
kalau ada masa buat akaun tipu2 kat situ…hahah
shaxx´s last blog post..Buckle Your Family Size Up
Reply
December 9th, 2008 on 8:45 am
Thanks for sharing, I never believed in e-mails by “banks”.
Reply
December 9th, 2008 on 11:06 am
haha…aku tak rasa pon phishing website akan ada function rehister…kekeekkekkee
Reply
December 9th, 2008 on 11:09 am
maksud aku bagi dia userid and password yg tipu punya. so kenakan dia balik. bukan register arr…
shaxx´s last blog post..Buckle Your Family Size Up
Reply
December 9th, 2008 on 11:10 am
haha…yeah…a lot funnier if we received emails from other banks that are totally unrelated..bank of canada and other shits..
Reply
December 9th, 2008 on 11:12 am
ahaks…tuh ker maksud ko? hehe…aku selalu wat camtuh…muakakkakka
Reply
December 9th, 2008 on 1:46 pm
aku dapat byk email macam nie..bukan cimb je…maybank pon ada…tapi cam biasa laa..delete the email..
azlan´s last blog post..Happy Eid al-Adha 2008
Reply
December 9th, 2008 on 2:06 pm
i receive a few email from maybank. and yup they are phising sites.
still i am curious can they get our money if they know our password and username? what about the TAC Number? Or is there any other way around it?
taukey´s last blog post..Petunjuk Pengunjung
Reply
December 9th, 2008 on 7:58 pm
sebab tu important semua knowledge kena tahu
YAN^S´s last blog post..Ni post utk kau Haaziq
Reply
December 9th, 2008 on 10:51 pm
btol tuh beb..bukan stakat cimb jer…maybank pon ada…tp aku pon wat bodoh jer..hehe
Reply
December 9th, 2008 on 10:53 pm
taukey..great question from you..there are several ways they can do that..first, when they got your credentials and personal info, they can do some social engineering to change the phone number. secondly, i heard if you have a list of approved transfer list, they can use sql injection and replace the account of the approved list to their account number..scary right?
Reply
December 9th, 2008 on 10:53 pm
btol tuh beb…tak perlu tahu secara detail kesemuanya..sket2 dah cukup tp at least biar tahu…
Reply
December 10th, 2008 on 7:48 am
oh my god. so basically they can do anything they want with the account. no wonder a lot of people found out their money gone MIA. have to be careful then. thanks for the insight…
taukey´s last blog post..Petunjuk Pengunjung
Reply
December 10th, 2008 on 10:34 am
pakcik nye email pon penuh dengan spam cam nie… ayam tol….
Uncle G´s last blog post..Lepak Dengan Ahli Photoskool
Reply
December 10th, 2008 on 12:39 pm
dapat gak email mcm gitu…. tapi tak buat ape2 pun sbb kak jei tak de pun akaun CIMB..huhuhuhu…….
Kujie´s last blog post..Memiliki Kehilangan
Reply
December 10th, 2008 on 2:21 pm
that’s something i heard a while back on the sql injection on m2u.not sure if they fixed the problem or not. but yes, given sufficient info they have, they can social engineering the helpdesk as an angry and disgruntled customer demanding mobile phone number to be changed…or they can call back the customer to ask them to test the TAC number system to check whether it’s working or not..it’s that simpel and that’s possible…
Reply
December 10th, 2008 on 2:23 pm
biasa la uncle..diorang ni main hantar jer email..kekadang ada org jual list email utk duit…hehe
Reply
December 10th, 2008 on 2:24 pm
haha…itu yg terbaik tuh kak jie…kantoi jer diorang..bukan diorang tahu pon kak jie ada akaun bank cimb ke tak..
Reply
December 10th, 2008 on 3:27 pm
jual list tok duit? fuh.. yang heran camne la depa dapat email pakcik sekali
Uncle G´s last blog post..Lepak Dengan Ahli Photoskool
Reply
December 10th, 2008 on 3:44 pm
senang jer uncle..cth cam kalau kita register kat forum or comment kt blog..semua tuh diorang leh amik list email n jual kt orang..tak susah pon sbnrnya..guna google pon bleh capture list email atau cam kt yahoo groups memaner ke..
Reply
December 10th, 2008 on 8:04 pm
ehm..abaikan aje email macam tu.
Reply
December 10th, 2008 on 11:27 pm
yup…btol ..tuh antara yg terbaik..nak pedajal pon bleh gak..hehe
Reply
December 11th, 2008 on 12:40 am
hahaha.. mmg.. byk gak dapat kat email.. aritu maybank2u.. ni dah cimb online plak… aku yg x pernah2 ade kaitan ngan cimb pon dia leh suh update akaun.. What the fish kan? hahahahaa..
well, komen macam tu… satu je perlu kita buat… tick dan click, SPAM
Reply
December 11th, 2008 on 12:45 am
lochoe terlibat. jom belasah die. hehe. smlm wat open house. ajak la mmbr2 mycert dtg umah. sonok borak pasal forensik. akoo forensik pasal dna bla3x, die org pasal IT neh. akoo da suh die org tgk2 budak name lochoe. haha!
Sweet Thinker´s last blog post..Perempuan Bertuhankan Siapa?
Reply
December 11th, 2008 on 1:02 am
tapi akoo rase fenomena nie sbb domain murah cam cilake. cuba ko tgk domain2 yg terjah dlm inbox ko tuh. len2 dowh. 3-4 jenis dari cimb je. ampegas.
Sweet Thinker´s last blog post..Perempuan Bertuhankan Siapa?
Reply
December 11th, 2008 on 5:19 am
aku rs aku ade dpt email CIMB camtu
account CIMB pun xde, pe kes la CIMB plak
xde keje nak bace pun, delete je~ hihi
Adila´s last blog post..COME ON Chelsea!
Reply
December 14th, 2008 on 12:52 pm
lantak depa la. aku padam aje.
titan´s last blog post..Gambar Panas dan Cek Adsense
Reply
December 14th, 2008 on 3:12 pm
sblm ko chop SPAM, ko pegi la nak pedajal jap….haha…bg akaun mengarut kt diorang….haha
Reply
December 14th, 2008 on 3:12 pm
haha..selamba tak ajak aku pegi open house ko…what the fish….nanti dapat result, cakap kt aku..bleh kita sama2 pegi ugut lochoe plak..
Reply
December 14th, 2008 on 3:13 pm
btol gak tuh aku rasa…maybe sbb domain skang ni murah…kekadang aku rasa diorang host kat umah diorang jer skang ni…internet laju punya pasal….hehe
Reply
December 14th, 2008 on 3:14 pm
wakkakakakka…ko antara org yg bernasib baik la beb….hehe…kalau tertipu pn takde masalah punya !
Reply
December 14th, 2008 on 10:23 pm
aku dah post pasal maybank2u phishing..skang ada lak cimb clicks phishing..minggu lepas dapat ambank phishing lak..banyak betullaa..aku rasa penipu tu dapat mangsa 5 orang pun dah boleh jadi kaya raya..
sufian´s last blog post..Webhosting Pilihan Saya - Hostgator
Reply
December 15th, 2008 on 11:45 am
ahhah. sori. open house tue sis akoo pnye. jd akoo jemput mane kenalan lama je. sori bro. ko masih cyber. hehe!
Sweet Thinker´s last blog post..Persahabatan Di Salah Erti
Reply
December 17th, 2008 on 4:58 am
haha..berapa banyak daaa email phishing ko dapat ni? memang btol email ko tercemar ni..hehe
Reply
December 17th, 2008 on 5:03 am
ceh..itu macam ka? tuh la ko..aku nak jumpa ..kerek tak nak jumpa..maklum la..celebrity la katakan…hehe
Reply
December 17th, 2008 on 10:56 am
celeb ape. akoo duit pun xde. akoo nek moto. korang nek kete. akoo x setaraf korunk semua. huuu. akoo nk dpt duit ads nk byr duit minyak moto. huhu!
Sweet Thinker´s last blog post..Ukuran Iman Dari Pemakaian
Reply
December 17th, 2008 on 11:58 pm
aku pon naik moto gak beb…aku jarang berkereta kecuali ada urusan2 memerlukan kereta sahaja…duit ads sket xsempat guna isi minyak kereta pon…haha
Reply
January 10th, 2009 on 7:58 am
mmg cunning la dorg nih…
aku pnh dpt…tp dier silap hantar sbb akaun aku dah close dah pon…bengong!
ChekguBH´s last blog post..Cara Nak Bantu Palestine?
Reply
January 13th, 2009 on 7:42 am
haha…memang..diorang banyak cara nak bagi orang tertipu..ikut kreativiti masing2 beb..
Reply