5th January 2005

Halifax

Halifax bank <supprefnum898@halifax.co.uk>

Halifax Internet banking: OFFICIAL INFORMATION

HTML

Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.

Yes

http://207.202.89.91:87/f/

1. Email claims to be from Halifax asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.

2. Halifax never send users emails requesting details in this way.

3. URL and email text disguised by embedding in an image - a technique used to get past spam filters.