Need help? Ask the community or hire an expert.
Go to Avira Answers
Target:Halifax
Date discovered:04/05/2008

 General The goal is to get the following information:
    • Bank account
    • Personal data
    • Email account


Phishing method:
    • 'text' link

 Email Details From: Security@halifax-online.co.uk
Subject: Security Department Notice

Visible link: Click here to update and verify your online Billing
Actual link: http://www.hoamnet.com/comgroup/bbshop/data/tiptech/.../.online/...
IP address: 61.111.255.21


The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
    • The Body of the email contains HTML content.



This screenshot is how the phishing email looks like:


 Page Details Visible URL: http://www.hoamnet.com/comgroup/bbshop/data/tiptech/.../.online/...
Actual URL: http://www.hoamnet.com/comgroup/bbshop/data/tiptech/.../.online/...
IP address: 61.111.255.21


The phishing page will look like the following:



Description inserted by Dominik Auerbach on Sunday, May 4, 2008
Description updated by Dominik Auerbach on Sunday, May 11, 2008

Back . . . .