# MA-068.022004: MyCERT Alert - RHB Bank New Phishing Scam

**Date:** 16 Feb 2004  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-068.022004  
**Advisory ID:** MA-068.022004

---

#### Regarding the above matter, MyCERT has discovered the circulation of an email purportedly from RHB Bank requesting users/customers to validate their personal RHB Bank account at RHB Bank's website.
http://www.rhbbank.com.my
Upon analysis by MyCERT, the above website attached in the email points to fake website of RHB Bank hosted at Taiwan with the below URL:
> http://210.192.42.34/img/in.htm
An example of the email received is as below:
(Take note that email uses a fake and non-existence "from" information)
> ---------Example of Email -------------
> Subject: Your RHB Bank account protection.
> Date: Sun, 15 Feb 2004 21:04:02 +0000
> From: Validate
> Reply-To: Validate
>
> -----------------------------------------------
MyCERT had verified with RHB Bank and according to them such email was not sent by them and they advise users to ignore any such emails. Such emails are being sent in order to gain access to your Internet Banking password, this can then be used to access your bank accounts.
This method of gaining Internet Banking login and password for malicious purposes is also called the phishing scam. Such scams use decoy Web pages and spam messages to trick unsuspecting users into releasing sensitive information, such as logon and password information.
List of phishing scams involving other financial institutions around the world is available at:
http://www.antiphishing.org/phishing\_archive.htm
MyCERT strongly urge users who receive emails purportedly from a bank requesting to change their logon and password should ignore/delete such emails immediately.Users are also advised to refer and verify any such emails with their ISPs, CERTs or with the Particular Financial Institutions mentioned in any of such emails.
MyCERT can be reached for further assistance at:
Tel: 03-89961901
Fax: 03-89960827
Email: [[email protected]](/cdn-cgi/l/email-protection)
https://www.mycert.org.my