Sony Bank Phishing Website Observation Report

on

On February 2023, we observed websites targeting Sony Bank users, created for the purpose of phishing scams to steal your personal information. We have observed 29 phishing websites so far. In this article, we'll discuss the details of this phishing site and how to handle it.



Overview of the Phishing Site

Phishing sites mimicking Sony Bank have an appearance very similar to the legitimate website for the company. However, this site is fake and has been created to collect your personal information. Once you access this site, the scammers attempt to collect your personal information. You may also be prompted to enter your username and password on a fake login page.

Example of the Phishing Site





Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.

https://www.virustotal.com/gui/collection/a72038e2832624de70f6a546826c7140f3cc1158b000713659730903d5bc111d

https://otx.alienvault.com/pulse/63eafe7df17e7a0b6a50860e

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you've already accessed such phishing website, take the following steps:
  1. If you entered any personal information, change all passwords and alert your bank and credit card companies.
  2. Enable multi factor authentication to prevent access from attacker.
  3. If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  4. Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  5. Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it's important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you've encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.