Phishing is similar to those pervasive spams mimicking eBay, PayPal, and many banks from outside the region. The perpetrators found an opening on an innocent’s computer and used the email client to send emails to State University students and staff, purporting to be from the credit union. The credit union was able to take these down by researching the WHOIS data (a database that tracks the name and address of the domain owner) from Network Solutions and contacting the host and ISPs. The attack began at Purdue Employees Federal Credit Union and also targeted their own brand.”]
Source: https://www.bankinfosecurity.com/phishing-victims-fight-back-a-837