Credit Union Members
A text phishing scam targeting credit union members tell
recipients their credit or debit card has been locked
or deactivated and instructs them to call a phone number.
The text message falsely claims to be from a credit union.
All of the text messages include the first four digits of the
named credit union’s debit card BIN, and a phone number to call.
If you receive such a message, do not call the number or
reply to the text. Never give out your personal information
in response to an e-mail or text. If issues ever arise
relating to your debit or credit card — or if you have
concerns about your card status — call only the number(s)
listed on the back of your card.
Automated Phone Message Scam
Pre-recorded phone messages are being delivered to random
consumers with the warning that their debit cards have been closed,
and to reactivate the card you must enter your card number and PIN.
Please do NOT reply. MCU and its card monitoring network will NEVER
ask you for your card or PIN. If you have responded to one of these
calls or are suspicious of any messages you receive, please contact
MCU at 800-662-2772.
Beware Clampi Trojan
Hundreds of thousands of Windows computers are believed to be
infected with a Trojan called "Clampi" that has been stealing
banking and other log-in information from infected PCs since 2007.
Clampi is also known as Ligats, Ilomo, or Rscan.
Clampi infects computers when people visit web sites hosting
malicious code that exploits vulnerabilities in browser plug-ins
Flash and ActiveX. When the computer is used to access a targeted
banking or other site, the log-in and other information is stolen.
Clampi has spread quickly through Microsoft-based networks in a
worm-like fashion in recent months.
Joe Steward, SecureWorks' director of malware research for the
Counter Threat Unit, has been researching the Clampi Trojan for
two years. He has identified 1,400 web sites in 70 different
countries out of 4,500 sites being targeted by the Trojan attack.
The sites include financial institutions, credit card companies,
online casinos, retail sites, utilities and brokerages.
SecureWorks recommends these best practices:
- Keep your anti-virus software up-to-date.
- Follow general security best practices.
- You may want to keep a computer dedicated only for online banking and bill pay use. Do not use this computer for surfing the web, or to send and receive email, since malicious web sites and email are two of the key malware infection vectors.
For more information, please visit the SecureWorks website
Bogus Cell Phone Text Message
MCU has learned of a new email phishing scam. This fraudulent
attempt to capture card numbers is done with an automated text
message referring to themselves as the CO-OP Services Credit
Union Customer Services Dept. from a four-digit phone number
of 3693. Read more >
NCUA Issues Fraud Alert
The NCUA issued a fraud alert about a recent phishing attempt to
obtain credit card account numbers and expiration dates.
Read more >
Con Artists Using IRS Logo for Money Scam
The Internal Revenue Service has issued an alert, warning that the
IRS name and logo is being used by fraudsters attempting to
access taxpayer financial information through email, telephone
and cell phone text messaging. Read more >
