MailGuard Blog

National Australia Bank (NAB) has once again been impersonated by cybercriminals in a phishing email scam designed to steal users’ confidential data.

Customers should be wary of an email titled “Please review your account” claiming that their debit card has been blocked.

Intercepted by MailGuard, this new phishing scam advises customers that their “debit card has been temporarily blocked” and that “online payments and cash withdrawals can’t be made until the issue is resolved.” To create a sense of urgency, the email also asks to “confirm your details within the next 48 hours.”

Sent from “NAB”, the sender name is spoofing National Australia Bank with the actual sender address of “oren(at)orentzo(dot)co(dot)il”, and an email subject reading, “Please review your account”.

In this case the scammers have added a degree of sophistication by varying the sender email addresses. Using different SendGrid email addresses i.e. airmaster(dot)com(dot)au(at)sendgrid(dot)net or lynchgroup(dot)com(dot)au(at)sendgrid(dot)net, the scammers aim to avoid being be blocked by email security services.

National Australia Bank (NAB) has once again been impersonated by cybercriminals in a phishing email scam designed to steal users’ confidential data.

Brandjacking - where cybercriminals impersonate the brands we trust, in order to fool us into clicking on malicious content - has affected some of the world’s biggest companies, past and present. 

Anyone can be a target of brandjacking scams.

A new scam email purporting to come from National Australia Bank (NAB) is currently infiltrating inboxes.

Imitating leading financial institutions such as banks to gain access to users’ confidential data isn’t exactly a new trick adopted by cybercriminals, but it is still one to be wary of. MailGuard intercepted one such phishing email scam purporting to come from National Australia Bank (NAB).

The NAB Bank's branding has been exploited by criminals in a new phishing fraud detected by MailGuard.

The email shown above appears to be a notification from the bank advising the recipient that their account “is now locked.”

The message contains several typical elements of a phishing email:

Banks are well-trusted institutions, so when cybercriminals are looking for good trademarks to use in their email attacks they often rip-off bank branding.

This new scam email uses the NAB trademark to try and persuade recipients that it is a genuine notification message from their bank. The message tells the victim that they have been sent a “SWIFT message” as a “confirmation of payment” to their account.

A new email scam mimicking a Big Four bank falsely tells recipients their account has been disabled.

If you bank with the National Australia Bank (NAB), be warned that cyber criminals are sending out a fake survey with the promise to reward participants with a $75 thank-you payment.

MailGuard has successfully blocked a targeted phishing campaign from cyber criminals posing as National Australia Bank (NAB).