A text message was sent to my phone stating that my Bank of America account had been suspended due to suspicious activity. It then provided a link to reactivate it. Obvious phishing scam. The URL they provided was through tinyurl.com. I was curious so I went to the site.
I was surprised to find that the domain of the actual URL pointed to what seems to be a legitimate business @ http://griffinconstruction.com.au. If desired, I can provide the path to the malicious page as well. I thought it probably best to not include it here.
Doing a little research I discovered this is a wordpress site. And doing a little more research I discovered that many wordpress sites have been hacked before. On the main website page there is a Contact Us link. I have attempted to contact the owner. But I would think attempting to contact the owner of a hacked website through the website itself would be an exercise in futility.
I have reported it to Google but that seems a bit like reporting a burglary to the NSA. I don't expect much if anything to come from it. I have also contacted Bank of America to inform them.
Is there anything else I should do?
A little more than 24 hours later and I just received a 2nd text message. The phone number is slightly different. But it's the same country code and area code as the first message. The message itself is the same except now they're using bit.do to shorten the URL. After reading the comments I decided to check this one using an online link expander.
The bit.do URL expanded to http://deichelmauspics.de/
Yet another hacked Wordpress site. The path of the URL leading to the phishing page is exactly the same as before.
http://griffinconstruction.com.au now shows:
This Account has been suspended. Contact your hosting provider for more information.
I guess that explains the 2nd message :)
Thank you to everyone who contributed their thoughts on this
I suppose there is no real way to know exactly what caused the website to be taken offline. But at the end of the day, the important thing is that it is in fact offline. And in my opinion, that would not have happened without the contributions from the people of Information Security Stack Exchange. That's pretty awesome.
Update #3 So it's been 8 months. I was looking at another Wordpress site today and it made me wonder what had become of the site mentioned in this question. So I went to their website and... nothing has changed. There is still a fake Bank of America page buried deep down within folders that shouldn't be publicly accessible but are. And that's just stupid and careless. I doubt that most people would fall for the Bank of America scam as it was presented in this case. But still, someone might. See for yourself.
MALICIOUS LINK (no longer works)