Experts flag Bank of America phishing scam that hands your device over to hackers

Date:
Wed, 05 Aug 2026 15:20:00 +0000

Description:
Why would Bank of America want to install ScreenConnect on your computer?

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Huntress flags phishing emails spoofing Bank of America, pushing victims into different infection chains on Windows vs. macOS Windows users were tricked into installing ScreenConnect
RMM via fake Account Guard, while macOS users faced credentialharvesting
forms for identity theft Emails mimicked Bank of America branding but came from unrelated domains; users advised to verify sender addresses to spot
scams Bank of America customers have been warned to take extra caution after experts warned of hackers spoofing the bank into trick you into downloading unwanted software and granting them access to your computer.

Security researchers Huntress revealed how it received a phishing email in their honeypot (an address set up primarily to catch scammers) claiming to have come from Bank of America. Obviously, the message came from a domain completely unrelated to the company, but looked almost identical to the real thing, with the company logos, color schemes, and other details, meticulously imitated. Latest Videos From TechRadar Watch full video here: Just another ScreenConnect scam In the email, the researchers were warned that their account was about to be restricted unless they confirmed certain information.

Depending on the platform from which the victim views the email, both the infection chain and the end goal are different. For Windows users, victims
are invited to install Account Guard, which is described as a powerful tool designed to protect your financial data, prevent unauthorized transactions, and other cyber threats. You may like Hackers abuse UltraVNC, Splashtop, and ScreenConnect to hijack business PCs Devious phishing campaign hijacks a genuine Meta business feature to send scam emails as they really do come
from Meta's own address New 'scareware' attack hits 2.8 million victims, pretending to lock them out of your browser

This is no guard - this is a Visual Basic script that leads to an
installation of the ScreenConnect Remote Monitoring and Management (RMM)
tool. ScreenConnect is not malicious itself - it is a legitimate tool - but
it is also one of the most abused software out there, leveraged to grant attackers unabated access to victim computers without triggering any alarms.

For macOS users, on the other hand, the goal is different. Instead of trying to deploy malware, the attackers try to steal sensitive data. First, the victims are asked to log in to their banking account (twice - the first attempt is scripted to fail, in case the victim purposely submits the wrong password the first time). Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features
and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Then, once they log in, the second web page asks the victims to confirm their details - full name, mailing address, government ID details, Social Security number (SSN), and the payment card details. This is more than enough information for an identity theft attack, or even wire fraud.

Huntress is now warning all Bank of America users to double-check the sender address for any email claiming to be from the bank, since that is the best
way to know if the email is legitimate, or a scam. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/experts-flag-bank-of-america-phishing-s cam-that-hands-your-device-over-to-hackers


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)