Phishing: Issue Reviewed

from:		USAA <lhromanik@samuelmerritt.edu>
to:

Our Valued Customer,

Your USAA account is inactive.

Please view/download the attachment below for reviewed.

Sincerely,
USAA.

First off, does the email address / URL match where this says it's from?  USAA Bank?  Nope.  Second of all, let's look at the grammar.  It's bad.  "Download the attachment below for reviewed?"  Please.

The PDF attachment contained a really grainy USAA logo, and the text below:

Dear Customer, Certain limitations has been placed on your USAA account due to security measures. Click here to review and secured your account Best Regards, USAA Bank.

The link that "Click here" routes to is actually this:  http://www.interkulturlab.com/backup/gbemi.htm

Now.  Does that look like a USAA URL?  No.  No it does not.  Once again - classic phishing scheme here, trying to bait you to clicking on an unknown link to provide tons of personal and sensitive info.  Don't do it.  If you have a USAA account and you get something like this, go to the URL you usually go to, sign in, and look things over.  Never - and I mean NEVER - click on links in random emails or attachments.

~Blue