Tuesday, 3 February 2015

We're improving your Halifax account phish


We're improving your Halifax account phish:

Headers:
From: "Halifax Online Banking"{securitynews@halifax.co.uk}
Subject: We're improving your Halifax account
Message body:
Good news. You received this email as a notice for the database update for this month.
This update is designed by our IT engineers to provide higher security to our customers
online accounts, prevent unauthorized account access and other types of online fraud.


On 13 February 2015 we'll be making an improvement to your account 
- to help you get the most out of it. You'll be able to pay cheques and cash 
into your account at most Post OfficeЎ§branches - giving you another way to bank with us.


Please download the document attached to this email and update your account.


Yours sincerely,


Paul Drinkwater,
Non-Executive Chairman of the Board.
Attached to the email is a html file:
Halifax Online Banking.html

The fake html phishing site looks like this...





Cheers,

Steve
Sanesecurity.com

No comments: