I've always received legit emails from Maybank indicating that funds has been transferred to my account via m2u@maybank.com.my
Today I received another email from this address asking me to review my account with a PDF attached to it (of course I didn't click on the link).

I suppose something has gone wrong somewhere, outlook failed to detect it as a spam/phishing email. It appeared in my focused inbox like usual.
You might want to warn those around you as those who are not tech-savvy might fall for it. Either way, I've forwarded the email to Maybank's phishing reporting department.

Normal legit email from Maybank



This suspicious email from the same email address


Phishing email PDF Content

Thanks for the heads up.

normally all bank email I wont click any inside link in the email including credit card statement, all info I login bank account to check

99% phish.

Number 1, banks would address you by name instead of the generic customer title and number 2, call the bank when in doubt.

same case

99.9%

Check the header. Most likely relayed through reputable SMTP providers hence it didn't end up in spam.

The bank will not email you in any way if it is something important related to your account. They will send the usual snail mail to you or the branch will contact you.

Maybank email kena hack by davidmoore? Or maybe spoofed maybank email.

Confirmed phishing

Ya that seems like the case
But from our end there's nothing much we can do, can't even blacklist the email address but take extra precaution not to click on anything suspicious

well technically u can still blacklist it but you won't be receiving those transaction related emails

This post has been edited by evilhomura89: Jul 19 2018, 04:02 PM

Does m2u send email to inform us transaction? I never received such email.

maybank has 2 domains: maybank.com and maybank2u.com.my
so email would either be example@maybank.com or example@maybank2u.com.my

the email u received is not legit maybank domain. (maybank.com.my)

This post has been edited by Archemedia: Jul 20 2018, 09:12 PM

there's no maybank.com.my

confirm phishing

this one confirm phishing lah..
next time check properly the sender.
btw, you click all the files/URLs, most likely you kena ransomware.
please update us in 3-5 days.

sometimes the email looks legit but it not...
it got invisible characters in the email address...

domain can spoof bro. even phone number can spoof also.