A recent phishing scam mimicking Bank of America has emerged, allowing cybercriminals to gain remote access to victims' devices. This attack, identified by Huntress, uses a deceptive email that appears legitimate and directs victims to a fake website. The scam involves downloading a Visual Basic script that installs ScreenConnect, enabling attackers to control the victim's system. Notably, the emails do not link back to Bank of America's actual domain.
The attack varies by device type; Mac users are prompted for personal information while Windows users are tricked into downloading a malicious file masquerading as 'Account Guard'. Experts recommend being cautious with email origins and links to prevent such scams.