" Dear client of the Halifax Internet banking, The recent cases of the fraudulent use of clients accounts forced the Technical services of the bank to update the software "...

Another instance where forged web content is presented in front of a genuine web page giving the impression that the forgery is a pop up window generated byt he genuine page (see images below).

The forged page is heavily scripted, and users wont be able to see the genuine URL by using a right click of selecting file properties. The true URL is http://www.halifax-online.co.uk_mem_binformslogin.asp.userset.net:4903/h/formslogin.htm which resolves to an anonymous DNS service and not the Halifax Bank.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

The Spoof Email ...

The bogus web page (the pop up style window - in front of the genuine page - contains the forged web content) ...