Websense detects Phishing Email stealing PNB’s Data

According to a latest report, Websense Security Labs has come across a phishing email targeting customers of Punjab National Bank seeking to obtain password credentials of corporate as well as individual customers.

This phishing campaign requires the recipient to open an email attachment and fill in the required fields including: user ID, Password, transaction password and mobile number. Once completed, the form redirects customers to the legitimate bank site while their personal information including password credentials are sent to a server under the attacker’s control.

Websense has also announced that it has taken measures to proactively block this phishing campaign using ACE (Advanced Classification Engine) at multiple stages of the attack chain.