Crooks In Action - Jenson Farrago Phishing

Alleged source: Citizens Bank (2004/09/25)
Security@Citizens.com
Subject: Cititzens Bank - Suspicious Activity Reported

citizens bank

Dear CitizensBank.com Customer,

During our regular update and verification of the Internet Banking Accounts, we could not verify your current information. Either your information has been changed or incomplete, as a result your access to use our services has been limited. Please update your information.

To update your account information and start using our services please click on the link:
Update My CitizensBank.com. [http://www.citizens-security.tk/]

Note: Requests for information will be initiated by Citizens Business Development; this process cannot be externally requested through Customer Support.

Sincerely,

CitizensBankcom
Security Department

Citizens Bank (2004/12/02)
supprefnum33@citizensbank.com
Subject: Citizens Bank Online - Details Confirmation

citizens bank

It's funny The Bible Pokemon Let's break up! Vacation I don't feel like Rap Lyrics Niki Taylor Valetine's Day Lyrics let's shake hands or Not You might put in 1882 Angelia Jolie Kid Rock Let's face facts. Midi in 2000 ?? ???? Wrong number I am a in 2003 The point is That's quite right

Citizens Bank (2005/01/23)
support@citizensbank.com
Subject: Important Online Banking Alert

Dear valued Citizens® Bank member,

Due to concerns, for the safety and integrity of the online banking community we have issued the following warning message.

It has come to our attention that your Citizens® account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and renew your records you will not run into any future problems with the online service. However, failure to confirm your records may result in your account suspension.

Once you have confirmed your account records your internet banking service will not be interrupted and will continue as normal.

To confirm your bank account records please click here.

Thank you for your time,
Citizens® Financial Group.

Citizens Bank and Charter One Bank (2007/08/14)
cservice.refL0682293768SL.gps@citizensbank.com
Subject: Urgent security notification for client! (message id: 917745564090842)

Dear Citizens Bank and Charter One Bank customer,

Citizens Bank & Charter One Bank Customer Service requests you to complete Money Manager GPS Client Online Form.

This procedure is obligatory for all business and corporate clients of Citizens Bank and Charter One Bank.

Please click hyperlink below to access Money Manager GPS Client Online Form.

http://moneymanagergps.session-38733.citizensbank.com/forms/clientcare.apx

Please do not respond to this email.

function: 0x36966032, 0x95899982, 0x0964, 0x7, 0x7, 0x6, 0x4013 QWG YY8P HA4 XA1. rev: 0x9671, 0x170, 0x86, 0x93331929, 0x9, 0x03821143, 0x1, 0x2 4N3M: 0x82225760, 0x4492, 0x3 close: 0x00884040, 0x8, 0x1, 0x389, 0x2617, 0x9167, 0x6 stack: 0x6845, 0x4435, 0x9, 0x011, 0x5574 LWPC: 0x3541, 0x24, 0x759, 0x77, 0x69, 0x33786250, 0x037, 0x2109, 0x16, 0x70, 0x0544 include: 0x99, 0x0, 0x758, 0x60, 0x543, 0x25890502, 0x3991, 0x2873, 0x524, 0x15, 0x6852 0x7634, 0x089, 0x6, 0x4786, 0x8, 0x3656

0x7, 0x13, 0x68391888, 0x6, 0x8, 0x89, 0x19640231, 0x47, 0x10, 0x0 0x2, 0x5775, 0x85589600, 0x9514, 0x96999856, 0x36233944, 0x96926592, 0x19520313, 0x478, 0x322, 0x2 0x6462, 0x8461, 0x452, 0x6, 0x8, 0x36736592, 0x64, 0x1692, 0x180, 0x7539, 0x34077156, 0x7524, 0x36832736 stack, BBF, include, PG1G, VWK, 0WH, serv, D29, revision. function: 0x09990845, 0x24, 0x8 9, 0x61, 0x63, 0x8269 GZH: 0x7, 0x83162014, 0x284, 0x1622 B1SN. 0x65919927, 0x3 0x62687898, 0x9, 0x7, 0x87, 0x960, 0x41, 0x9, 0x32, 0x8419, 0x31, 0x69241348, 0x18, 0x0, 0x58383433, 0x426 I661: 0x92, 0x7030, 0x96, 0x333, 0x5, 0x22, 0x128, 0x02, 0x35, 0x66, 0x84676671, 0x7, 0x974

0x76686718, 0x03106497, 0x2, 0x1, 0x76621328, 0x87, 0x691, 0x9868, 0x5, 0x6, 0x43283378, 0x86268153, 0x91785794, 0x57, 0x7 0x4, 0x2192, 0x6, 0x025, 0x6886, 0x414, 0x55541629, 0x6516, 0x3998, 0x329, 0x9 0x6100, 0x02226955, 0x49, 0x02, 0x582, 0x49, 0x4145, 0x89284026, 0x36938271, 0x8489 type: 0x083, 0x64, 0x588 stack, close, file, type, 8BH, FPFQN4YI: 0x88 M1K4: 0x62716647, 0x9434, 0x47, 0x29, 0x1668 0x08, 0x279, 0x7342, 0x4 cvs, 3XRI, KJX, create, start. IM72: 0x03, 0x20, 0x52245352, 0x230, 0x90783234, 0x19, 0x18, 0x46, 0x411, 0x19, 0x9830

Citizens bank (2007/08/10)
clientservice.refpm05156135568en.gps@citizensbank.com
Subject: Citizens Bank Notification!

Dear business or corporate customer of Citizens Bank,

Citizens Bank Customer Service requests you to complete Money Manager GPS Online Form.

This procedure is obligatory for all Money Manager Global Processing Solutions™ (GPS) users.

Please click hyperlink below to access Money Manager GPS Online Form.

http://moneymanagergps-id09426904.citizensbank.com/gps/userdir/onlineform.aspx

Please do not respond to this email.

_______________________________________________________________________________

rev: 0x272, 0x053, 0x54780666, 0x955, 0x740, 0x1809, 0x31, 0x71966526, 0x78756216, 0x1554 3ON, V3A9 serv, 6KHZ 5WW: 0x665, 0x882, 0x44534823, 0x7638, 0x66, 0x992, 0x79, 0x74066728, 0x738, 0x6314, 0x5698, 0x87 OV33: 0x977, 0x8, 0x1714, 0x1432, 0x3, 0x90, 0x11, 0x01, 0x9932, 0x8103, 0x18 0x30, 0x46, 0x57637150, 0x7, 0x84, 0x85, 0x6055, 0x4, 0x73353403, 0x9634, 0x53 root: 0x057, 0x66503914, 0x921, 0x1, 0x866, 0x172, 0x0, 0x27, 0x149, 0x92, 0x52246520, 0x5648, 0x72, 0x050, 0x373 0x88, 0x69, 0x135, 0x2, 0x2073, 0x94874487, 0x98, 0x2132 cvs: 0x558, 0x47, 0x3068, 0x6386, 0x033, 0x42155731, 0x56, 0x1, 0x53929421, 0x4 0x61734283, 0x2438, 0x5, 0x33994721, 0x1, 0x77278963, 0x2449, 0x2940, 0x46113496

0x50, 0x832, 0x565, 0x8079, 0x76, 0x59 JV5: 0x949, 0x2, 0x5, 0x17, 0x09 source: 0x9, 0x7, 0x37538328, 0x917, 0x2, 0x0, 0x69402953, 0x10223042 QNR. cvs: 0x32930700, 0x90, 0x0022, 0x9, 0x7, 0x527 0x7864, 0x92012606, 0x3694, 0x6, 0x5, 0x3803 api, HKL9. source: 0x112, 0x67, 0x6870, 0x4, 0x8326, 0x9, 0x4688, 0x524, 0x25 399: 0x124, 0x2, 0x1821, 0x12375597, 0x54744109, 0x4943, 0x675, 0x7375, 0x905, 0x00, 0x4 0x2348, 0x3, 0x06915655, 0x394, 0x2, 0x48, 0x632, 0x94, 0x0, 0x42392018, 0x0421, 0x63, 0x506, 0x17213867

0x7374, 0x9 0x34445577 0x638, 0x970, 0x4, 0x208, 0x994, 0x4233, 0x51253812 media: 0x24161519, 0x1068, 0x237, 0x10741626, 0x86207014, 0x680, 0x94525151 hex, exe, root, close, type0x2667, 0x8 0x555, 0x517, 0x1911, 0x9, 0x444, 0x2, 0x50610889, 0x53, 0x2177, 0x89659762, 0x558, 0x6, 0x6, 0x9, 0x5328 0x84, 0x7, 0x9842, 0x87004911, 0x78, 0x80, 0x288, 0x42 65VV, 53F, ANR, QEKQ, BD61, 29E, root. interface: 0x10, 0x225

Citizens bank (2007/10/04)
corporateservice.refgr0157259.gps@citizensbank.com
Subject: Account Secure Confirmation! (message id: c7839395057)

Dear business/corporate customer of Citizens Bank,
Caution: we continue to be informed that customers and non-customers are receiving fraudulent phishing emails requesting confidential information and credentials. As a reminder, the bank will NOT send customers unsecured email or other correspondence requesting that they confirm or provide Customer ID's User ID's, card numbers, social security number or PINs and passwords. As always, if you receive any unsolicited e-mails, phone calls, faxes or other suspicious attempts to gain personal or confidential information, please e-mail us at fraudprevention@cfgcustomers.com or call Cash Management Client Services at 1-877-550-5933, Monday to Friday, 7 a.m. to 6 p.m. ET. For Additional information please see the events page
For security measures, we require you to confirm your challenge questions:

http://id-32713887.citizensbankmoneymanagergps.com/securepage/challenge.aspx
Sincerely,
Citizens Bank Online Billing Services Team

0x09652919, 0x967, 0x02, 0x757, 0x96, 0x35 serv JGE: 0x9, 0x9903, 0x48, 0x4133, 0x5, 0x53, 0x62, 0x95305882, 0x4 7HQ: 0x4, 0x74567859, 0x0654, 0x0772, 0x541, 0x5906, 0x053, 0x02956498, 0x70, 0x342 0x85391671, 0x56570653, 0x4, 0x6, 0x476, 0x1683, 0x2580, 0x690, 0x3, 0x33, 0x645 hex: 0x15, 0x50923676, 0x71544279, 0x043, 0x9 0x10, 0x96153569, 0x8, 0x246, 0x4, 0x78141731, 0x7, 0x2, 0x0, 0x029 serv: 0x9, 0x8, 0x5, 0x9604, 0x9, 0x0, 0x922, 0x5075, 0x008, 0x95808246, 0x733 close: 0x2483, 0x49
0x0, 0x5654, 0x8224, 0x2511, 0x907, 0x31, 0x6440, 0x38, 0x0 0x7 end: 0x0, 0x73565820, 0x1, 0x84835766, 0x4, 0x472, 0x90, 0x6111, 0x67, 0x15, 0x231, 0x951 C1B 9BY 6Y0 KSW file hex 99H. 0x0258, 0x0526, 0x0, 0x9744, 0x57177392, 0x20, 0x0662, 0x3, 0x6 0x11, 0x990, 0x35651523, 0x8, 0x6771, 0x2, 0x0030 BYN, NF4X, type 53O: 0x7143 revision: 0x39, 0x85, 0x0, 0x2, 0x4965, 0x120, 0x4, 0x49, 0x2 Q27: 0x70, 0x24, 0x98, 0x290, 0x61, 0x318, 0x653
FTQ: 0x4, 0x7434, 0x9, 0x60, 0x85470856, 0x11465630, 0x311, 0x46 0x785, 0x80050984, 0x10, 0x9644, 0x63, 0x5 SYQ: 0x472, 0x6582, 0x176, 0x35601977, 0x46, 0x301, 0x6 0x81, 0x4, 0x4760, 0x66, 0x99579966, 0x4, 0x62116094, 0x761, 0x25, 0x0577, 0x85, 0x00057953 TIGZ, tmp AD5, WPGD.8F0K: 0x8798, 0x652, 0x16424818, 0x01639948, 0x821, 0x19, 0x30, 0x945, 0x14100558, 0x45643976, 0x03805570, 0x962, 0x91, 0x00, 0x02 0x70, 0x6063, 0x2952, 0x3, 0x8550 0x03266207, 0x2069, 0x1, 0x7, 0x4, 0x2, 0x88, 0x5, 0x7, 0x945, 0x2642, 0x5221 tmp function create define tmp. 013: 0x94, 0x13478957, 0x63936935, 0x3, 0x172, 0x3392, 0x42710974, 0x039, 0x41

GPS manager support (2008/03/18)
support@citizensbank.com
Subject: Citizen GPS Manager Protect your account from illegal access.

Good day dear clients,
We are sorry to inform that the fraudulents with the accounts of our bank have recently increased. That is why our bank changes the security system, which will provide maximum security to our clients if the accounts are used by frauds. You will receive a special program to your e-mail this week, as well as the instruction how to use it. With its help you will have an opportunity to make payments. Without this program no one will be able to transfer money from your account. If you lose the program, you will have to pay $4,99 and we will send you the copy of it.
To confirm the registration of this anti-fraud program visit this web-site and complete the necessary forms:
https://www.citizensbankmoneymanagergps.com/
Sincerely,
Citizens Bank Online Billing Services Team

Citizens Bank (2008/05/08)
servvices54@citizens.net
Subject: Customer Satisfaction Survey !