Last revised or Updated on: 9th March, 2016, 7:27 AMWe are seeing a mass run of phishing emails spoofing American Express saying Please create your Personal Security Key. There are 3 sites so far discovered that attempt to perform this phishing attack http://americanexpressnew2016.com/login http://americanexpressglobal.com/login http://axpoglobalverify.com/login Currently all 3 sites fail to resolve from a UK IP address. They were all registered yesterday 8 March 2016 via Todaynic.com using Chinese details which I assume are false. The name servers associated with the domains are DNS1.NEWSITEDNS2.RU and DNS2.NEWSITEDNS2.RU Edit: after a bit of digging around, it appears that the NEWSITEDNS2.RU has previously been used for Amex and other bank phishing attacks. It is suggested that you block their IP numbers to prevent further and … Continue reading →