Phishers targeting commercial accounts

Today I receieved a phish that is targeting commercial accounts of BB&T. It's interesting because it will be much harder to do transaction analysis fraud prevention on commercial accounts (same for brokerage accounts) and the email used a pending 'security device' roll-out as the premise for needing the information.

It also shows how our customer Online Banking Solutions is ahead of the curve. They have a downloadable java application for commercial banking and have embedded WiKID's two-factor token client in their software. This tight integration gets them two-factor authentication, plus mutual authentication. Moreover, they have integrated user provisioning tightly to avoid just this kind of trap.