Search our Spoof Library...
Another Spoof Email and Phishing Scam report by MillerSmiles.co.uk - click this image to go to our home page.

! your account on Halifax Internet banking
6th May 2004

please forward any scams you've received to spoof@millersmiles.co.uk


Report Summary
Date Reported
6th May 2004
Apparent Sender
eBay
Return Address
Halifax <user-billing38@halifax.co.uk>
Subject
! your account on Halifax Internet banking
Format
HTML - image only
Method
image link leads to bogus web content which is set in a pop up style window in front of the genuine halifax page (which is opened in a separate browser) to give the appearance of being generated by the genuine Halifax web page. Submitted form data is captured by a local script.
Bogus Web Content?
Yes
URL of web content
http://www.halifax-online.co.uk.userset.net:4903/h/formslogin.htm (obfuscated in the email)
RISK LEVEL
HIGH
WARNINGS

1. Note the URL of the forged web page given above - its a sub domain of userset.net and has been created to give the appearance of a genuine halifax-online.co.uk domain.
2. The userset.net domain has been used in a number of recent bank email and phishing scams such as the recent Nationwide Bank scam. Learn more in our Forum.
3. Whilst the forged web page is loaded into a pop up style window, it is also scripted to defeat a right click menu, so determing the true URL or origin of this page is very difficult for all but the experienced coder.

 

" Dear client of the Halifax Internet Banking, The recent cases of fraudulent use of clients accounts forced the Technical services of the bank to update the software. "...

 

Update at 18:24GMT - We have just received this statement from Halifax ...

I can confirm that this has not been issued by Halifax plc or any subsidiaries of the Halifax Bank of Scotland plc Group. This is not the first time we have seen such an e-mail and is referred to as "phishing", we urge any recipients to ignore them and delete them.

Our position on such e-mails can be found at www.halifax-online.co.uk .


Jason Clarke
Senior Press Officer
Group Communications
HBOS plc

 

 

The Spoof Email ...

! your account on Halifax Internet - email

 

The bogus web page (which opens in a pop up style window in front of the genuine page as shown) ...

! your account on Halifax Internet - forged web page

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...
Subscribe

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the MillerSmiles.co.uk web site.

Click the arrow to return to previous page

Home

Guides...

Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide