Metadata Consulting [dot] ca

Monday, November 21, 2016

Phishing Email - BMO Important Security Notice

For the record, the following BMO Important Security Notice phishing email has been recently circulating.

Nov 15 at 2:19 AM

Dear Customer,

For your protection, BMO Bank Of Montreal automatically alerts customers when our security platform changes on our systems. We detected unusual activity on your BMO Bank Of Montreal account on 11-09-2016. For your protection, We need you to review your details immediately.

Click on Sign On below to Start your Account Review.

Sign On

Ensure you update your details to avoid account suspension. We Are sorry for any inconveniences.

Sign on URL points rogue URL:
http://www1.bmo.bankofmontreal.findadecentqueue.pw/service/upgrade/=needed/onlinebnx/netbnx/NBmain/

The HTML of the email is

<html><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/></head><p><strong>Dear Customer,<br>
<br>
For your protection, BMO Bank Of Montreal automatically alerts customers when our security platform changes on our systems. We detected unusual activity on your BMO Bank Of Montreal account on 11-09-2016. For your protection, We need you to review your details immediately. <br><br>Click on Sign On below to Start your Acco=
unt Review. <br>
</strong></p>
<table id="x_yiv1078820824yui_3_16_0_1_1399663152274_48813" style="back=ground:no-repeat left top" width="100" cellspacing="0" cellpadding="0" border="0" bgcolor="#3583ae" height="15">
<tbody id="x_yiv1078820824yui_3_16_0_1_1399663152274_48812">
<tr id="x_yiv1078820824yui_3_16_0_1_1399663152274_48811" bgcolor="#3583">
<td id="x_yiv1078820824yui_3_16_0_1_1399663152274_48862" width="15" valign="middle" bgcolor="#3583ae" align="center"></td>
<td id="x_yiv1078820824yui_3_16_0_1_1399663152274_48810" width="96" valign="middle" bgcolor="#3583ae" align="center">
<a href="http://www1.bmo.bankofmontreal.findadecentqueue.pw/service/upgrade/needed/onlinebnx/netbnx/NBmain/" target="_blank" rel="noreferrer" sid="x_yiv1078820824yui_3_16_0_1_1399663152274_48814" style="text-decoration:none;color:#fff; font:bold 11px arial,sans-serif">Sign On</a></td>
</tr>
</tbody>
</table>
<strong><font id="x_yiv1078820824yui_3_16_0_1_1399663152274_19828" style="font-size:12px; color:#333333; line-height:18px" face="Verdana, sans-serif"><br>
Ensure you update your details to avoid account suspension. We Are sorry for any inconveniences. <marquee>
Thank you for choosing BMO Bank Of Montreal.</marquee></font></strong></td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div></div>
</div></div> <div style="display: none;"></div> </div>  <span class="PersonaPaneLauncher"><div ariatabindex="-1" class="_pe_d _pe_2=
2" aria-expanded="false" tabindex="0" aria-haspopup="false">  <div style="display:none;"></div></div></html>

How to tell this is a Phishing email ?

Check email address in full, if it's not from originating company then it's phishing.
Hover over all links in email, if it's not from the amazon.com site then forget it.
The best way is to look at message source, see below.

How to examine Email Message Source ?

Now lets look at message source

Outlook.com->Actions->View Message Source.
Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from apple.com.

Report Phishing Email (not as Spam)

Outlook.com->Junk (at Top)->Phishing Scam
Gmail.com->More (downarrow to top right)->Report Phishing

Report Phishing URLs at Google now

If you have recievied this email take further action now by click these links

https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing emails to Amazon

Send the e-mail to stop-spoofing@amazon.com

Note: Sending this suspicious e-mail as an attachment is the best way for us to track it.

Thursday, November 17, 2016

Mobile Browser Usage has surpassed Desktop Browser Usage

Well we knew this was going to happen, and happen it did.

StatCounter Global Stats finds that mobile and tablet devices accounted for 51.3% of internet usage worldwide in October compared to 48.7% by desktop.

“This should be a wake up call especially for small businesses, sole traders and professionals to make sure that their websites are mobile friendly. Many older websites are not,” commented Aodhan Cullen, CEO, StatCounter.

“Mobile compatibility is increasingly important not just because of growing traffic but because Google favours mobile friendly websites for its mobile search results.” He pointed out that Google recently launched a tool where businesses can test their website mobile performance.

Thursday, November 3, 2016

Phishing Email - Outlook your account will expire in 48 hours

For the record, an Outlook phishing email recently circulating.

Text Version for search engines

From: Outlook [mailto:HHHzz-111111111111111111-XUB@nied=ziela.nl] 
Sent: November-02-16 6:33 PM
To: = youremail@sympatico.ca
Subject: Outlook.com -> mailbox 

    Outlook
    
    Dear member (youremail@sympatico.ca),


    Your account will expire in 48 hours! 


To avoid this please follow the secure link.   
    
https://login.live.com/login.srf?wa=youremail@sympatico.ca

hides PHISHING ADDRESS ->     

                             http://gamballlc.com/AndersonManley/index.php 


 Regards 

                 The Outlook Team