Halifax 25 - Phishing

See also

Summary

Full description

Target:	Halifax
Date discovered:	04/05/2008

General The goal is to get the following information:
    • Bank account
    • Personal data
    • Email account

Phishing method:
    • 'text' link

Email Details From: Security@halifax-online.co.uk
Subject: Security Department Notice

Visible link: Click here to update and verify your online Billing
Actual link: http://www.hoamnet.com/comgroup/bbshop/data/tiptech/.../.online/...
IP address: 61.111.255.21

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: http://www.hoamnet.com/comgroup/bbshop/data/tiptech/.../.online/...
Actual URL: http://www.hoamnet.com/comgroup/bbshop/data/tiptech/.../.online/...
IP address: 61.111.255.21

The phishing page will look like the following:

See a brief description here.

Description inserted by Dominik Auerbach on Sun, 04 May 2008 13:38 (GMT+1)
Description updated by Dominik Auerbach on Sun, 11 May 2008 15:02 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back