{"id":975,"date":"2020-07-18T20:49:02","date_gmt":"2020-07-18T20:49:02","guid":{"rendered":"https:\/\/osintme.com\/?p=975"},"modified":"2020-07-20T09:20:18","modified_gmt":"2020-07-20T09:20:18","slug":"new-phishing-campaign-aimed-at-bank-of-ireland-users","status":"publish","type":"post","link":"https:\/\/osintme.com\/index.php\/2020\/07\/18\/new-phishing-campaign-aimed-at-bank-of-ireland-users\/","title":{"rendered":"New phishing campaign aimed at Bank of Ireland users"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"975\" class=\"elementor elementor-975\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5315dd2 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5315dd2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e2e9724\" data-id=\"e2e9724\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1988755 elementor-widget elementor-widget-text-editor\" data-id=\"1988755\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em><strong>Update 20.07.2020: It appears that all the websites examined below have now been taken down. The urlscan links are dead too.<\/strong><\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-409badd elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"409badd\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a7e6e4b\" data-id=\"a7e6e4b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-28ce499 elementor-widget elementor-widget-text-editor\" data-id=\"28ce499\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A new phishing campaign targeting Bank of Ireland users appeared this week.<\/p><p>This is nothing new (apart from the websites, they are new); after all, banking institutions are amongst primary targets for scams like this, simply because not only do the cyber criminals acquire personal data of the bank&#8217;s customers through phishing &#8211; they can also go after their wallets.<\/p><p>At least two readers contacted me independently this week with evidence that something was up.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-299b574 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"299b574\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5be466b\" data-id=\"5be466b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c0d2356 elementor-widget elementor-widget-image\" data-id=\"c0d2356\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"300\" height=\"233\" src=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-message-1.png?fit=300%2C233&amp;ssl=1\" class=\"attachment-medium size-medium wp-image-977\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-message-1.png?w=474&amp;ssl=1 474w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-message-1.png?resize=300%2C233&amp;ssl=1 300w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7ec3aaa elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7ec3aaa\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a158633\" data-id=\"a158633\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e2b8127 elementor-widget elementor-widget-text-editor\" data-id=\"e2b8127\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Phishing SMS messages like this one were sent to users, prompting them to click on the malicious link.<\/p><p>In some cases, the actual genuine phone number used by Bank of Ireland to communicate with customers was spoofed.<\/p><p>This means that if you have previously received legitimate SMS messages from BOI, the spoofed message sent to you by the scammers would appear in that thread.<\/p><p>Like in the case of this user:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3cf4db9 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3cf4db9\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5c34dfb\" data-id=\"5c34dfb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8121e7c elementor-widget elementor-widget-image\" data-id=\"8121e7c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"316\" height=\"656\" src=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-message-2.png?fit=316%2C656&amp;ssl=1\" class=\"attachment-medium_large size-medium_large wp-image-978\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-message-2.png?w=316&amp;ssl=1 316w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-message-2.png?resize=145%2C300&amp;ssl=1 145w\" sizes=\"(max-width: 316px) 100vw, 316px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f843b1f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f843b1f\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-277e51d\" data-id=\"277e51d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7999274 elementor-widget elementor-widget-text-editor\" data-id=\"7999274\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>This can be very confusing to some people as it&#8217;s easy to conclude that since this message appears in the thread of messages known to be legitimate, it also must be from a trusted sender (the first two messages with one time passwords related to Revolut are genuine).<\/p><p>There are many more malicious domains than just the above two.<\/p><p>The list of BOI phishing domains I identified in the last week or so (in no particular order):<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5670827 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5670827\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7d61a9c\" data-id=\"7d61a9c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-840bef5 elementor-widget elementor-widget-text-editor\" data-id=\"840bef5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>365online-billing[.]com<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/930a9c0f-d43e-426d-8bed-c666de948b01\">here<\/a><\/p><p><strong>tickets-boi[.]com<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/4685b91b-4e22-4f30-91fa-84f9772dd85e\/\">here<\/a><\/p><p><strong>supports-boi[.]com<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/a47dd551-3b8a-41f0-ba33-9aa975394ffb\/\">here<\/a><\/p><p><strong>365serviceupdate[.]com<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/904f6aa1-5d18-48a8-bdda-3fc5380d05e1\/\">here<\/a><\/p><p><strong>boi365login[.]co<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/84fb2d47-2c0b-478a-9032-efb47d19387d\/\">here<\/a><\/p><p><strong>recover-boi[.]com<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/f1971849-e7f1-4191-96de-021175242bf7\/\">here<\/a><\/p><p><strong>security-boi[.]com<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/e49121f2-d134-48ef-9a36-9d6d98a6b965\/\">here<\/a><\/p><p><strong>secure-boi[.]com<\/strong> &#8211; urlscan <a href=\"https:\/\/urlscan.io\/result\/6d63231d-7d37-4321-958a-3d2af3793ff2\/\">here<\/a><\/p><p>\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f4fb51f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f4fb51f\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8259563\" data-id=\"8259563\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1ec574d elementor-widget elementor-widget-image\" data-id=\"1ec574d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1024\" height=\"876\" src=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-1.png?fit=1024%2C876&amp;ssl=1\" class=\"attachment-large size-large wp-image-979\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-1.png?w=1079&amp;ssl=1 1079w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-1.png?resize=300%2C257&amp;ssl=1 300w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-1.png?resize=1024%2C876&amp;ssl=1 1024w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-1.png?resize=768%2C657&amp;ssl=1 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ede040d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ede040d\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8754c80\" data-id=\"8754c80\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5244767 elementor-widget elementor-widget-image\" data-id=\"5244767\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"961\" height=\"421\" src=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-login-scam.png?fit=961%2C421&amp;ssl=1\" class=\"attachment-large size-large wp-image-980\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-login-scam.png?w=961&amp;ssl=1 961w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-login-scam.png?resize=300%2C131&amp;ssl=1 300w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-login-scam.png?resize=768%2C336&amp;ssl=1 768w\" sizes=\"(max-width: 961px) 100vw, 961px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f94b3e6 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f94b3e6\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d4b4159\" data-id=\"d4b4159\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-059a925 elementor-widget elementor-widget-heading\" data-id=\"059a925\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What do these websites have in common?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9dca529 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9dca529\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-29c69c1\" data-id=\"29c69c1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e734a0a elementor-widget elementor-widget-text-editor\" data-id=\"e734a0a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>The majority of the above phishing websites are hosted on Alibaba.com servers in Singapore on the exact same IP address or IP address ranges;<\/li><li>They all appeared online for the first time 2-3 weeks ago. Some as recent as 2-3 days ago.<\/li><li>They use the free Let&#8217;s Encrypt security certificates to appear legitimate;<\/li><li>The source code is very similar in practically all of those (simplistic);<\/li><li>The input is getting saved into hidden fields.<\/li><li>The input validation parameters are also similar.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2d89ccc elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2d89ccc\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-85da7ee\" data-id=\"85da7ee\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-70ab3bb elementor-widget elementor-widget-image\" data-id=\"70ab3bb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"792\" height=\"644\" src=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-2.png?fit=792%2C644&amp;ssl=1\" class=\"attachment-large size-large wp-image-981\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-2.png?w=792&amp;ssl=1 792w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-2.png?resize=300%2C244&amp;ssl=1 300w, https:\/\/i0.wp.com\/osintme.com\/wp-content\/uploads\/2020\/07\/BOI-phishing-2.png?resize=768%2C624&amp;ssl=1 768w\" sizes=\"(max-width: 792px) 100vw, 792px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-a716d77 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a716d77\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-59bf2a1\" data-id=\"59bf2a1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-09f96de elementor-widget elementor-widget-text-editor\" data-id=\"09f96de\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>I could be stating the obvious here, but a few important caveats all the same:<\/strong><\/p><ol><li>Never just click on anything, whether in a text or email.<\/li><li>Always compare the link against the legitimate URL (hover the cursor without clicking).<\/li><li>Bookmark your sites, do not rely on typing in your URLs manually.<\/li><li>If in doubt, check a website using free services like <a href=\"https:\/\/who.is\/\">Who.is<\/a> or <a href=\"https:\/\/centralops.net\/co\/\">CentralOps<\/a>.<\/li><li>Look for obvious discrepancies there, like the website creation date and where it&#8217;s hosted.<\/li><li>Don&#8217;t trust emails or texts just because they appear like they came from a legitimate source.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7d2c1c2 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7d2c1c2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-30b85d9\" data-id=\"30b85d9\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-bb50bbe elementor-widget elementor-widget-text-editor\" data-id=\"bb50bbe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>PS. More scammy domains are <a href=\"https:\/\/dnstwister.report\/search?ed=7777772e626f693336356c6f67696e2e636f\">waiting in situ<\/a> and we will probably notice them pop up in the near future, once all of the above websites have been shut down&#8230;<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Eight new phishing websites pretending to be Bank of Ireland &#8211; the scammers will be scamming&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"off","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[18],"tags":[103,76,82,81,79],"class_list":["post-975","post","type-post","status-publish","format-standard","hentry","category-digital-privacy-security","tag-bank-of-ireland","tag-cybercrime","tag-phishing","tag-scam","tag-website"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts\/975","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/comments?post=975"}],"version-history":[{"count":11,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts\/975\/revisions"}],"predecessor-version":[{"id":992,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts\/975\/revisions\/992"}],"wp:attachment":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/media?parent=975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/categories?post=975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/tags?post=975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}