Official Notice for all users of Barclays IBank - Spoof Email Phishing Scam
27th February 2004

This spoof email links to forged web content which appears to open as a 'pop up' from a genuine Barclays iBank web page to add a sense of authenticity ..... beware!

read also our brief guide to Phishing

This spoof email presents us with a message asking that you 'confirm your online banking membership details' by using the link provided and is almost exactly the same as today's other Barclays' scam. See image below.

The whole message is an image which when clicked on will open a new browser window which is scripted to further open the genuine www.barclays.co.uk web site and a new 'pop up' type window with a bogus form (forged to look like a genuine Barclays iBank page). See image below. The form is part of a a few pages which go on to request personal and account information and any data entered will be sent on to the perpetrators.

This method of serving up fake content has been on the increase. Previously, we'd seen this method used in Citibank scams, but are now seeing it used in other phishing scams as well. Since Microsoft finally plugged the URL Spoofing vulnerability in its Internet Explorer and Outlook products earlier this month, scammers are now turning to this method to fool their prey.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

Take a good look at the following images, because this email scam may be coming to an inbox near you!

The Email ...

The web pages ...