Watch Out for Fake Bank of America Emails Stealing Remote Access

Cybercriminals are running a clever phishing scheme that mimics official communications from Bank of America. These emails use authentic looking branding to trick people into visiting fake websites. Once there, users are prompted to download a file labeled Account Guard. If a Windows user runs this file, it secretly installs remote monitoring software onto their computer.

The malicious script disguises the monitoring software as a legitimate Windows Security service. This gives the attackers persistent access to the infected machine by bypassing standard security controls. By using known remote management tools, the attackers can maintain control over a victim's system without triggering immediate alerts.

While this attack is highly dangerous for Windows users, Mac users are seeing a slightly different version that focuses on phishing for personal data instead of installing malware. This shows the attackers are customizing their approach based on the device being used. Security experts recommend that everyone carefully verify the sender of any banking email before clicking links or downloading files.

Keeping your computer safe in the digital age requires constant vigilance. Always double check that an email address matches the official domain of the company reaching out to you. If you ever feel unsure about an alert from your bank, log in directly through their official mobile app or website rather than clicking links in an email.