A spoofed Bank One email which comprises a complete but forged sign in page ...

This Bank One spoof email is a complete, forged sign in page, constructed using Bankone.com's script and graphics (drawn directly from their servers) and so looks very convincing.

There is no forged web content this time, fraudsters are reliant on recipients who hold a Bank One online user account using the forged sign in form to either check their email or to view some policy change, in fact the reasons for signing into the form are quite indistinct in any of the email text.

Once the user ID and password are submitted into this form, the data is sent to a PHP script located at http://196.33.171.200/bollogin.php which resolves to a South African ISP. This script will most likely send the data to the fraudster(s) by email.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

The Spoof Email ...