24th November 2004

Woolwich

Woolwich Internet Bank <users-support45@woolwich.co.uk>

Woolwich official updates

HTML

Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.

Yes

http://www.woolwich.co.uk.splash.usermaindll.com:9120/wo/

1. Email claims to be from Woolwich asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.

2. Woolwich never send users emails requesting details in this way.

3. URL disguised as an image in the body of the email - a technique used by scammers and spammers to hide the email content from spam filters.

4. The spoof url is choosen to closely resemble the real Woolwich address.

5. Another variation on a common scam, this has pooped up before in many guises.