Wachovia Phishing Attack

This morning my spam filtering systems detected a new phishing email scam which claims to come from the Wachovia.  The email contains a link, which my filtering systems removed.  This leads me to believe that the email contains a virus at the very least. This is based on the fact the filtering systems that I'm using attempt to remove virus prior to applying any other filters.  Keep in mind that most organizations will not send out emails requesting that you login to change information about you or your account. 

Email Accounts which have been forged include and are not limited to:

• memberservice@wachovias.com
• Wachovia

Subject lines for the phishing scam include and are not limited to:

• Wachovia Bank - Wachovia Customer Service

Example of the emails text:

From: Wachovia<memberservice@wachovias.com>
To: info@pharmacyfirst.com
Subject: Wachovia Bank - Wachovia Customer Service

Dear Wachovia Bank member,

We are sorry to inform you that your Wachovia Bank Online Account has been suspended. A high number of failed login attempts have been recorded on your online account. As a security measure we had to temporarily suspend your account.

To restore your account we have attached a form to this email.  Please download the form and follow the instructions on your screen.

NOTE: The form needs to be opened in a modern, javascript enabled, browser (ex: Internet Explorer 8, Firefox 3, Safari 3, <br>Opera 9).

We apologize for any inconvenience this may have caused.

Sincerely, the Wachovia Bank security team.

© 2010 Wachovia Bank. All rights reserved.

Attachments:

• application/octet-stream; name="restore_form.html"