Home See the latest email Hoax and more copies of hoax email and hoax web pages or sites See our article on Account Hijacking for more about spoof email hoaxes, how to recognise one, what preventative measures to take and what to do if you've fallen victim to one REPORT SUMMARY Date Reported
8th December 2003 Apparent Sender
Nat West Bank Subject
NatWest Bank
Security Update
Senders Address
(spoofed)
support
@natwest.com Content
text and a
link to a cloaked
fake Nat West
Bank web page
(see images) Spoofed Web page/site?
Yes Web page/site
content
forged Nat West
Bank web pages
which require passwords and
PINs Web page/site origin
URL
https://
64.174.108.131 Identity Theft method
Web form information
is captured and
relayed to the
scammers via a form processing service
provided by
dk3.com, while you
are sent to the
genuine eBay.com
sign in page
RESOURCES Try our free Auction Watcher! Worldwide Currency Converter Photographic Guide to Book Terminology including size codes, condition terms and common book defects How to recognise a first edition book List of Online Auction Sites around the World Resource Directory |
|
|
|
Nat
West Bank Security Update email scam
8th December 2003
Another email hoax hits Nat West Bank users ...
This email hoax takes the form of a notice
of a 'technical update' notice at Nat West and asks that you reactivate
your account by logging into it using the link provided. This
is a cloaked (disguised) link which leads to a number of forged
Nat West web pages. Also, included
in the email is a Nat West bank logo which very closely resembles that
on the genuine natwest.com site,.
The link shows in the email as https://www.nwolb.com but
this is cloaked and using that link will actually cause your browser
to open a page at http://64.174.108.131. This is assigned
to an individual in California, USA through Pacific Bell internet services
and clearly nothing to do with National Westminster
Bank at all.
The information requested on these forged pages represents
the security details that are needed to access your Nat West account
online. If you submit this information into the first two forged
Nat West web pages (see below) and proceed, the data is processed (and
most like captured for the scammers) using PHP script while you are unwittingly
sent on to a genuine Nat West online banking page. This genuine page
displays this message: "Unfortunately,
the NatWest OnLine Banking service is currently unavailable".
Whilst this hoax is not as convincing as the previous
Bank email scam (see
previous bank email scam here), it is very convincing none
the less, and some recipients will no doubt go on to provide the information
so fraudulently requested.
|
|
Stay
informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web
site. |