Halifax Bank - Identity theft site

[Garreg Ddu]

A new twist, and an even more devious scam. Still the same Nigerian origin.

X-SID-PRA: Halifax Online Banking <Onlinesecurity@halifax.co.uk>
Received: from User ([41.219.245.72]) Origin on "Starcomms.net" - a site registered to: NAVNEET SINGH, Plot 1261, Bishop Kale Close, off Saka Tinubu, Victoria Island, Lagos, Nigeria phone: +234-1-804-9370 fax-no: +234-1-811-0301 e-mail: navneets@starcomms.com
by OMTA14.westchester.pa.mail.comcast.net with comcast
id C84M1Z0051aSzzd3a00000; Fri, 11 Apr 2008 08:07:29 +0000
Reply-To: <Onlinesecurity@halifax.co.uk>
From: "Halifax Online Banking"<Onlinesecurity@halifax.co.uk>
Subject: *Notice* Halifax Security Measures
Date: Fri, 11 Apr 2008 09:07:19

Introducing Halifax Security Plus

At Halifax, we are committed to protect your personal data as well as your money. For the benefit of sacmmers - oh yeah

We are hereby introducing Halifax Security Plus which combines a wide variety of fraud prevention programs, sophisticated analysis tools and backroom processes to pinpoint and analyze suspicious activity.

This helps us detect and prevent fraud and reassure you that your personal and financial information, as well as your money is as safe online as it is at home, at the for this service, please follow the link below

https://www.halifax-online.co.uk/_mem_bin/secPlus/enroll

Which is a hidden link to: "http://www.fedbasquetchaco.org.ar//halifax/index.php" flagged by McAfee SiteAdvisor: may try to steal your information.
Why were you redirected to this page? When we visited this site, we found it may be designed to trick you into submitting your financial or personal information to online scammers. This is a serious security threat which could lead to identity theft, financial losses or other dissemination of personal information.


We hope you enjoy banking online with Halifax.

Halifax is a division of Bank of Scotland plc. Registered in Scotland No. SC327000. Registered Office: The Mound, Edinburgh, EH1 1YZ

[Garreg Ddu]

Another twist on phishing scams.

Received: from User ([82.128.19.49]) Multilinks Telecommunications Limited, 231 Adeola Odeku Str., Victoria Island, Lagos, Nigeria
Date: Sat, 19 Apr 2008 07:28:28 -0700

Reply-To: <secure@halifax.co.uk>
From: "Halifax Bank Plc"<secure@halifax.co.uk>
Sent: Saturday, April 19, 2008 3:28 PM Arrived before it was sent!!!
Subject: Online Banking - You Have 1 Unread Message
FPRIVATE "TYPE=PICT;ALT=Halifax - Always giving you extra"

Dear Halifax bank customer,

We have implemented security measures consistent with our internal information security practices to help us keep your information secure. These measures include technical and procedural steps to protect your data from misuse, access or disclosure, loss, alteration or destruction.

One of these security measures is HOF (Halifax Online Form) to help us to keep your personal and banking data up to date.

You should complete HOF on a regular basis.

Please complete HOF using the link below:

Halifax Online Form

Halifax Automated Mail Service. Please do not respond to this mail.

Yours,

Technical Support Team

(Security & Fraud Update)
Halifax Online Banking Ltd.

[FW Admin]

Many thanks for posting these examples of the now infamous 'Phishing' scams... originally, these were the exclusive domain of criminal gangs that were based out of some Eastern European countries (Russia, Estonia, Bulgaria to name a few).

It does now seem, unfortunately, that this somewhat rather lucrative format has been picked up by the "419" scammers based out of West Africa on a more regular basis, which is quite disturbing because these criminals usually go for where the most money can be acquired.

Usually the best thing to do when any of these emails are received, is to forward them as an attachment directly to the financial house or institution concerned - each of the major ones in the USA, Canada and throughout Europe have a special email address to which these can be emailed. These are acted uPon very quickly by the banks, and it's usually only a matter of hours before the bogus web site is closed down.

However, sad to say, in that few hours, very many people have already been duped by the contents of these fabricated messages, and have already given their personal banking details to these criminals who then proceed to steal the victim's identity and empty out their bank accounts.

Again, it is prudent to reiterate:

NEVER, EVER CLICK ON ANY LINKS TO ALLEGED BANKING, FINANCIAL OR CREDIT CARD LINKS THAT ARE CONTAINED WITHIN AN EMAIL - ALL OF THESE ARE FALSE; THESE INSTITUTIONS HAVE ALREADY INSTRUCTED THEIR CUSTOMERS THAT THEY NEVER, EVER SEND LINKS WITHIN EMAILS THAT REQUEST ANY PERSONAL INFORMATION!