The email message below, which claims the recipients' Permanent accounts have been temporarily suspended, is an attempt by cybercriminals to steal Open24 / Permanent TSB online banking users' credentials, financial and personal information, which includes Open24 Number, Internet Password, Personal Access Number, Mobile Number, Date of birth, Card number, Card expiration date, Card CVV, name, and address.
The "Permanent TSB Account Suspension" Phishing Scam
From: Permanent TSB [mailto:info@iis515.opentransfer.com]
Sent: 24 October 2017 11:46
To: pandiok@eircom.net
Subject: Important notification; Response required.
Dear Customer,
Your account has been temporarily suspended.
Please log in here.
The link in the fake Open24 / Permanent TSB goes to a fake web page created by cyber-criminals on a compromised website, to trick their potential victims into entering their personal and banking information on it. If the potential victims enter their information on the fake website, it will be sent to the cybercriminals behind the phishing email message, who will use it to hijack the victims’ accounts. They (cyber-criminals) may steal the victims’ money and use their accounts fraudulently.
Permanent TSB customers should never click on a link in an email message to sign into their online banking accounts. Open24 / Permanent TSB customers should always go to www.permanenttsb.ie to sign into accounts or update their account information instead.