Tuesday, 27 January 2015

Halifax Online Service Message IMPORTANT fail


Alert Summary:
IMPORTANT - Halifax Online Service Message phishing email, asking you to login and update your online banking details.... or does it?  Read on...

Headers:
From: "Halifax Online Banking"{halifax-infos@securesite.net}
Subject: IMPORTANT - Halifax Online Service Message
Message body:
Dear Customer,

Please note that starting from February 14, 2015 we will be introducing
new online banking authentication procedures in order to protect the private
information of all online banking users.

You are required to confirm your online banking details with us as you
will not be able to have access to your accounts until this has been done.

As you're already registered for online banking all you need to do is
to confirm your online banking details.

We have sent you an attachment which contains all the necessary steps in
order to restore your account access. Download and open it in your browser.

Once you've completed this you'll be able to manage your money whenever
you want, giving you more control of your finances.

Best wishes,

Security Team
Halifax Online Service
Attached to the email is a html file:
Billing Confirmation Form.html

The fake html attached take you to a faked phishing site...





Sorry .... what??? A Halifax fishing email that takes to you a faked BT site to confirm your Bill

Oops, try again.... lol...

Cheers,

Steve
Sanesecurity.com

No comments: