Lloyds TSB bank phishing email scam
12th December 2003

Lloyds TSB Security Server Update? Yes it is a scam ...

This Lloyds TSB Online for Business email uses the guise of a security update to fool recipients into using the links provided (which are coded with spoofed URLs) to send their browsers to forged Lloyds TSB Online web pages.

The true destination of these links are to spoofed web pages hosted on servers located in Japan, which is a favourite location for forged web pages (it seems that the West have more trouble having these pages removed than those hosted more locally).

Whilst we couldn't connect with the fake Lloyds TSB bank web pages, we have no doubt that this is not the end of this email scam. Either the pages will become available again or the email will resurface with the link code altered to send recipients to different web space and/or forged web pages.

This form of cloaking links with spoofed URLs has recently been declared a partial vulneribility in Mozilla browsers (which includes Internet Explorer) by internet security experts and writers. We've been reporting this form of disguised linking for many months now, but perhaps the recent concern with this 'vulnerability' will stir browser publishers to issue some form of patch to halt this continuing problem.

Take a good look at the following image, because an email scam just like it may be coming to an inbox near you!

The Email ...