A large scale phishing scam is underway that pretends to be a security notice from Chase stating that fraudulent activity has been detected and caused the recipient's account to be blocked.
Today, numerous people have told BleepingComputer that they received the same fake Chase "Security Notice" scam attempting to steal their banking credentials. One recipient said they fell for the scam after their card was denied in a purchase online and thought the email was a legitimate Chase fraud alert.
These phishing emails state that the recipient's Chase account was blocked after suspicious activity was detected.
"Recently, there's been activities in your account that seems unusual compared to your normal account activities, so we've taken security steps by blocking access to your account until you validate your information adequately."
To "unlock" the account, the recipients are prompted to click on the 'Restore Now' button in the email, as shown below.
Chase phishing scam
When the 'Restore Now' button is clicked, the recipient will be brought to a page asking them to log in to their Chase account. If they enter their login information, it will be sent to the attackers, who will then have access to the account.
The phishing page will further prompt the user to enter additional information about themselves to verify that they are the account owner. This additional information includes their first and last name, date of birth, Social Security Number, address, and phone number.
If a threat actor gets access to this information, they could use it to perform identity theft, gain access to other accounts, or send further targeted phishing emails.
It is important to remember that Chase fraud alerts never prompt you to ..
Support the originator by clicking the read the rest link below.
