A phishing site targeting the Millennium Bank was recently discovered by the Trend Micro Content Security Team, extorting account information from unknowing users. The said bank is based in Greece and started its operations in September of 2000.

Here is a screenshot of the reported phishing site:

The page crafted to look like the legitimate Millennium Bank Web page was found hosted at http://{BLOCKED} rnational2008.biz/update/millenniumbank/index.php.

Customers are asked to enter their account information such as credit card number, card expiration date, Card Verification Value (CVV) code, and ATM pin for a service posted as a Account Express Funding Testdrive. Upon clicking the Submit button on the site, any information entered by the user will then be forwarded to a phisher. The phisher will then have unauthorized access to the user’s bank account.

The Millennium Bank, whose legitimate URL is www.millenniumbank.gr posted a notification, warning its customers against falling for the fraud email messages leading to the phishing site.

It is quite unfortunate and alarming that despite the already widespread usage of online banking services, critical policies are still seemingly unclear to most users, making them easy targets for phishers.

It pays to emphasize now that banks will never ask users for information such as bank account numbers and ATM pins through email or by any other means.