Websense Security Labs has received reports of a phishing attack that targets customers of Vons Credit Union.
Users receive a spoofed email message which claims that the user must renew the service listed on the email, or it will be deactivated. The email provides a link to a phishing site that attempts to collect user account information.
This phishing site is hosted in the United States and was down at the time of this alert.
Phishing email text:
...Dear Member,
This is your official notification from Vons Credit Union that the service listed below will be deactivated and deleted if not renewed immediately. Previous notifications have been sent to the Billing Contact assigned to this account. As the primary Contact, you must renew the service listed below or it will be deactivated and deleted.
Renew Now < LINK REMOVED > your Online Banking and Bill Pay services.
SERVICE: Online Banking and Bill Pay
EXPIRATION: Sep, 20 2006
Thank you for using Bill Pay Service. We appreciate your business and the opportunity to serve you.
Vons Credit Union Member Services
********************************************************************** *******
IMPORTANT MEMBER SERVICE INFORMATION
********************************************************************** *******
Please do not reply to this message. For any inquiries, contact Member Services.