FI Frauds:Standard Bank, South Africa

Body of fraudulent e-mail (all links removed - notes are below)

Standard Bank
*
Your statement made easy*

Dear Customer

Attached is your provisional statement with the new charges. For your security
it has been encrypted. This means that you will need a /decoder/ to view your
statement.

Before you can view your statement, you must Download the attachment and install
the decoder.

*If you downloaded and installed the decoder previously, you _do not_ need to
download and install it again.*
*please download it by opening the attachment sent along with this message ,
Then login into your account to Download:* Download Statement
--------------------------------------------------------------------------------
*Opening your encrypted statement*
Once you have installed the decoder, you can open your statement named
"Statement.emc".
Opening the statement is a simple 2-step process:
*Step 1:* Double-click on the attachment.
*Step 2:* When prompted to save or open the attachment, choose 'Open'
*Step 3:* Enter your card number,Atm pin and password to view your statement &
view the charges on your account.
Please note if a "Open With.." dialogue box appears you will need to follow the
link above and download and install the decoder
--------------------------------------------------------------------------------
*Contact Us*

If you have any problems with the decoder, please call us on *0860 123 000*.
If you are calling from outside South Africa, please dial *+27 11 299 4701*.
Our lines are open from 7.30am to 6pm Monday to Friday and 7.30am to 1.30pm on
Saturdays.
Alternatively please email ibsupport@standardbank.co.za
<http://mc/compose?to=ibsupport@standardbank.co.za>

Enjoy your day,

The Internet Banking Team

Internet Banking

Inspired. Motivated. Involved. Copyright Standard Bank. All rights reserved.
Standard Bank of South Africa Limited (Reg. No. 1962/000738/06). Authorised
financial services provider. Registered credit provider (NCRCP15).

*Disclaimer and confidentiality note:*
Everything in this email and any attachments relating to the official business
of Standard Bank Group Limited is proprietary to the group.
It is confidential, legally privileged and protected by law. Standard Bank does
not own and endorse any other content.
The person addressed in the email is the sole authorised recipient.
Please notify the sender immediately if it has unintentionally reached you and
do not read disclose or use the content in any way.

Standard Bank cannot assume that the integrity of this communication has been
maintained nor that it is free of errors, virus, interception or interference.
For our privacy policy
or information about the Standard Bank group visit our website at

=======

Link is to a directory called "stdatmpin" at www.pn-vietnam.com. That directory name has been created in an insecure directory and research shows that the same directory name has been created on a number of sites to which Standard Bank customers have been directed.

We have not investigated the link but it as it is inviting the installation of software, we assume that it diverts to at least one other location from which dangerous software is downloaded and installed on the user's machine.