Experts flag Bank of America phishing scam that hands your device over to hackers
Why would Bank of America want to install ScreenConnect on your computer?
Experts have alerted Bank of America customers to a phishing scam that enables hackers to gain control of their devices. The alert comes from security researchers at Huntress, who discovered a phishing email that appeared to be from the bank. The email was designed to trick users into downloading unwanted software and handing over control of their computers to cybercriminals.
The phishing emails spoofed Bank of America's branding, but were actually sent from unrelated domains. The messages looked almost identical to the real thing, complete with logos, color schemes, and other details meticulously imitated. The emails claimed to inform the recipient that their account was about to be restricted, unless they confirmed certain information.
For Windows users, the infection chain involved installing ScreenConnect Remote Monitoring and Management (RMM) tool. Although ScreenConnect itself is a legitimate tool, it is frequently abused by attackers to grant them unrestricted access to victim computers without raising any alarms. For macOS users, the goal was to steal sensitive data such as full name, mailing address, government ID details, Social Security number, and payment card information. This information could be used for identity theft or even wire fraud.
To avoid falling victim to this scam, Bank of America customers are advised to verify the sender's address before opening any email that claims to be from the bank. This is the best way to ensure that the email is legitimate and not a scam.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — it may contain errors, so check the original before relying on it.
