We need to be careful on phishing attack email. Below is the email that I received from Maybank (maybank@may.com). may.com? When did Maybank get such domain name? I read through the email. I discovered all the links are Maybank website links except the final one ~ (click here) link. That one route to http://mail.grousd.com/l/index.asp. By looking at this link, I can confirm that this is phishing attack email. Oh… By the way, bank does not ask us to do anything with email. Bank usually call and ask us to settle at the branch. One last thing, the Maybank logo picture. It is taken from http://nastrade.com/our_client.html website.

Do be careful with this kind of phishing attack!

Stay safe online!
We would like to inform you that Maybank has been subject to recent phishing attacks. As a result you may have received spoof emails with the heading account suspended or urgent attention required. Please be aware that these are fraudulent messages sent by online criminals who wish to obtain your sensitive data, such as Maybank password, credit card number by collencting them via phishing websites which impersonate Maybank.

Following our Security Department investigations, we have found that you may have clicked on a link in a phishing email. Therefore, as a security measure, your account has been temporarily suspended for outgoing transactions.

We would like to ask you to do the following steps to comfirm your identity with Maybank:

Here’s how to get started:
1. Log in to Maybank online banking.
2. Click on “Request a TAC” button in the Utilities menu of your account.
3. Logout from your account and close the browser.
4. When you have received the TAC (Transaction Authorization
Code) on your mobile phone

(click here)

go to our secured verification
server and submit the requested information.

5. After you finish this procedure you can use your account normally.
NOTE: If you won’t follow this procedure in the next 24 hours your account will be suspended.
© 2001-09 Maybank. All rights reserved.