The Beanster Blog

I don't have a BPI Express account, so I knew this was a phishing email from the get go. When we look at it on a desktop browser we see the email address has been masked/tampered with When we hover (DO NOT CLICK) on the link we can see the URL is suspicious as well. DO NOT CLICK ON LINKS IN EMAIL. IT IS BETTER TO GO TO THE WEBSITE ON YOUR OWN AND NOT RELY ON LINKS BE WARY OF ATTACHMENTS, EVEN FROM PEOPLE YOU KNOW. TURN ON "TWO-FACTOR" AUTHENTICATION IF AVAILABLE. IF YOU FELL FOR A PHISHING EMAIL CONTACT YOUR BANK (OR THE WEBSITE) ASAP. The scary part is when viewed on mobile (in this case GMail for iOS) it looks ok but it is not, more and more people just do stuff on their mobile and this might fool some.

I got this email in my work inbox earlier today. Immediately, I was suspicious. Upon further inspection. We can see this is a bad email. The email sender + contents do not match. The linked file should be PDF but it's a JAR file (Java). The link is also suspicious (see URL). Avoid clicking links from email.