Convincing Phishing Scam Sent to Penn Staters

Late last night through early this morning, an email message mimicking a PNC Bank alert message was sent to most, if not all, Penn State email addresses. The "From" header of the message showed it being sent from "PNC Bank <pncalerts@rpnc.com>," or a variant thereof, with different letters showing up in-between the @ sign and pnc.com. The subject of the message was "PNC Bank Alert: Important Account Notice" and a screen capture of the message is below.
20130104pncphish.jpg
This messages was, of course, a phishing scam. The links in the message will take one to a page that looks very much like a PNC log-in page, but entering account information there will provide one's PNC user ID and password to scammers who will likely use that to gain access to your bank account(s).
PNC Bank provides these instructions on their website for those who have received such a message:
If you suspect that you've RECEIVED a fraudulent e-mail that appears to be from PNC Bank, do not respond. Never click on any link that seems suspicious nor provide any personal information.

  1. Forward the email to PNC Bank abuse@pnc.com
  2. Delete the email
If you responded or disclosed your personal information to a possible fraudulent message, notify PNC Bank's Online Banking Team immediately at 1-800-762-2035 option 3.
SOS has blocked access to the bogus PNC log-in page from all Penn State networks. However, it is likely to still be accessible from other networks, such as those you use for Internet connectivity at home and mobile networks like AT&T and Verizon.
As always, SOS recommends that you examine all of your incoming email carefully, especially any message that supposedly informs you of a problem with an online account. If you think there could be an actual problem with an account, DO NOT follow a link in an email message to investigate the problem. Instead, within your browser you should manually enter the Web address you know to be good for the organization with which you have an account (in this case, that would be www.pnc.com), or contact the organization by a known good phone number, such as those found on the back of your credit/debit card or published in a phone book (don't rely on a phone number in the email you're questioning).
Again, if you responded to this particular phishing scam, please contact PNC Bank at the number above. In this case, there is not anything SOS can do to assist you in protecting that account. But if you have responded to an alert about your Penn State Access Account and now have trouble accessing Penn State online services, please do contact us for assistance.

3 comments:

Know us

Our Team

Contact us

Name

Email *

Message *