# MA-065.012004: MyCERT Alert - The RHB BANK Fraudulent Email

**Date:** 28 Jan 2004  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-065.012004  
**Advisory ID:** MA-065.012004

---

Regarding the above matter, MyCERT has been receiving reports from our Internet users since late yesterday evening of receiving a suspicious email purportedly from RHB Bank.
The email uses a fake and non-existence "from" information:
From: RHBBANK
Subject: RHB BANK strongly recommends!
The email contains a message which was in gif format that urge users to click to logon. The link points to:
http://61.111.23.249:8888/%72/%69%6E%64%65%78%2E%68%74%6D
Upon analysis by MyCERT, the above fake website is located in Korea, However, the site has been shut down recently.
MyCERT had verified with RHB Bank and according to them such email was not sent by them and they advise users to ignore any such emails. Such emails are being sent in order to gain access to your Internet Banking password, this can then be used to access your bank accounts.
A notice from RHB Bank on this fraudulent email is available at:
http://www.rhbbank.com
This method of gaining Internet Banking login and password for malicious purposes is also called the phishing scam. Such scams use decoy Web pages and spam messages to trick unsuspecting users into releasing sensitive information, such as logon and password information.
List of phishing scams involving other financial institutions around the world is available at:
http://www.antiphishing.org/phishing\_archive.htm
MyCERT strongly urge users who receive emails purportedly from a bank requesting to change their logon and password should ignore/delete such emails immediately.Users are also advised to refer and verify any such emails with their ISPs, CERTs or with the Particular Financial Institutions mentioned in any of such emails.
MyCERT can be reached for further assistance at:
Tel: 03-89961901
Fax: 03-89960827
Email: [[email protected]](/cdn-cgi/l/email-protection)
https://www.mycert.org.my