U.S. Bank customers should never click on a link in an email to sign into their accounts or turn on "Enable Editing" for Microsoft Office email attachment (Word or Excel document) that ask them to do so in order to view the same document. Clicking on a phishing link that takes you to a fake U.S. Bank website can steal your online account credentials. And, opening and turning on "Enable Editing" for a malicious Microsoft Office document can infect your computer with spyware, ransomware or other malware.
A Sample of a "U.S. Bank Alert" Phishing Scam and Malicious Email
From: U.S. Bank Online [mailto:usbank@stjamesmac.com]
Sent: Tuesday, May 01, 2018 9:44 AM
Subject: U.S. Bank Alert
View this e mail as a Website page. See our Security Policies.
U.S. Bank?
Your credit-based card account was charged at Apple Online Store for $1,414.67.
Please do not respond to this email. If you want to get in touch with us, please log in to U.S. Bank Online Banking at usbank.com and send a message to Customer Service.
You are getting this e mail because you signed up for alerts through U.S. Bank Online Banking. If you no longer wish to get this alert, log in to U.S. Bank Online at usbank.com to temporarily terminate or permanently delete this notification.
View Details Here
U.S. Bank Online Banking
U.S. Bank who have received similar emails (like the one above), and who have clicked on the link in them and attempted to sign into their accounts, are asked to change their U.S. Bank account password and contact U.S. Bank for help.
For those who have opened the attached Microsoft Word document and turned on "Enable Editing", they are asked to scan their computer with the anti-virus software installed on it.