If you’re looking for your first home or planning to make improvements to the home you have now, selecting the bank you work with is as important as which house or which contractor you choose. At First Nebraska Bank, we know getting a loan can be a stressful, challenging experience. That’s way, when you ask about a loan from us, you won’t be shuffled through automated phone menus and transferred from department to department. You’ll work with one real-live person who will commit to you every step of the way through the loan process.
When you work with someone from your local community, you don’t have to start over and explain your situation every time you call or visit. We know your story because we take the time to get to know you. We’re your neighborhood banker. We’re your kind of people.
In addition to the one-on-one personal service you’ll get from First Nebraska Bank, we also offer great online resources to help you learn all you’ll need to know about what to expect when you apply for a loan. We offer learning modules covering the different types of mortgages available, how variables affect monthly payments, and the steps you need to take before you buy a home.
New Phishing Scam Spoofs SBA Load Officer
A newly discovered phishing campaign is spoofing a U.S. Small Business Administration loan offer in an attempt to steal banking credentials and other personal data.
This new scam appears to have started in early August, following a similar phishing attack in April that also spoofed SBA messages to maliciously install malware.
Fake Loan Applications
In the phishing campaign, the victims are asked to fill out an attached “disaster loan assistance” form that asks for personal and banking details. The document spoofs legitimate SBA loan applications.
Since the COVID-19 pandemic began, the SBA has been overseeing the Payroll Protection Program to help funnel loans to U.S. small businesses that have been disrupted. Fraudsters have used the agency’s images and logos as part of fraud campaigns designed to harvest victims’ credentials or steal financial information.
The spoofed messages have a legitimate SBA email address embedded in the body of the email. But if the victim hits the reply button, they see a slightly different, malicious address. The domain associated with this fraudulent email address, gov-sba[.]us, was registered on July 31 and is not associated with the SBA.
To create the attached fake PDF loan application, the criminals appear to have downloaded the legitimate loan documents from the official SBA government site and then created their own version. The original form was created with Adobe Acrobat, while the spoofed version was designed with an application called Skia – a graphics library for Chrome.
The goal of the scam is simply to gather information via the loan form that they can then use to commit fraud.
Because this phishing scam closely spoofs the SBA email address and loan application, it could prove difficult to detect. Anyone who receives an email about a loan application should call the SBA to check its legitimacy. The U.S. Department of Justice and the SBA have published notices warning about such schemes.