A fake email from Volksbank does not contain a Trojan or malicious link, but it does contain an attached HTML form.

This email is:

Screenshot: mimikama.org
Screenshot: mimikama.org

“Dear XXX YYY,

Due to Section 11 of the Money Laundering Act (GwG), we are obliged to keep the data you have stored in our system up to date and to check it.

In this regard, it is necessary to fill out the attached form and forward it to us

Please use the following form to carry out the comparison free of charge

Otherwise, we will have to charge your account 28 EUR and assign one of our customer service representatives to carry out the verification process with you manually.

You can easily carry out the comparison in the following steps:

  1. Open your email attachment and select the form
  2. Fill out all data and submit the order.
  3. Your account has been verified according to current guidelines.

We apologize for any inconvenience this may cause, but we are legally obliged to take these measures.

Kind regards,
your Volks- und Raiffeisenbanken”

The attachment to the email does not contain a Trojan, but rather a form in HTML format that you should fill out.
A perfidious method, the fraudsters do not have to upload the form to a fake website, which may be deleted after a short time!

Users should now enter data into the form that gives the fraudsters access to the users' online banking:

Screenshots: mimikama.org
Screenshots: mimikama.org

After entering the data, users are redirected to a website where they politely thank them for entering the data.
At this point it is clear that it is not an email from Volksbank, but by then the fraudsters already have the sensitive data!

Screenshot: mimikama.org
Screenshot: mimikama.org

Conclusion

It is a phishing email that evades protection programs and spam filters because there is neither a harmful link nor a malicious attachment in the email.
Instead, an HTML form is attached to the email, the data entered is then sent to the fraudsters, who can use the online banking data to empty the account and commit further fraud.

Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )