Be Net Aware

Sometimes the scammers try to be a little too clever and the e-mail goes wrong as is the case in the following e-mail where it appears that a html e-mail has been sent as text so you can see all the code, needless to say it is another failed Phishing attempt for alliance and leicester customers.

This e-mail aside from the From and Subject is exactly how it appears in my junk mail box.

From: Alliance & Leicester plc [mailto:helpdesk@alliance-leicester.co.uk]
Subject: Important Bank Mail

Content-Type: text/html

Content-Transfer-Encoding: 8bit

Return-Path: anonymous@plesk12.hospedagemdesites.ws

X-OriginalArrivalTime: 28 Aug 2009 11:47:52.0297 (UTC) FILETIME=[5FD7B590:01CA27D5]

<table width=”616″ align=”center” cellpadding=”0″ cellspacing=”0″ border=”0″ style=”font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px; color:#005baf;”>

<tr>

<td width=”616″ colspan=”5″ align=”center” style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_top.jpg) bottom left no-repeat;”><br><br></td>

</tr>

<tr>

<td width=”30″ align=”right” style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_left_top.gif) top right no-repeat;”><br></td>

<td width=”33″ align=”left”><br></td>

<td width=”479″ align=”right”><br>

<table cellpadding=”0″ cellspacing=”0″ width=”477″ align=”center” style=”font-family:Verdana, Arial, Helvetica, sans-serif; color:#818181; font-size:9px;”>

<tr>

</table>

</td>

<td width=”44″ align=”right”><br></td>

<td width=”30″ style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_right_top.gif) top left no-repeat;”><br></td>

</tr>

<tr>

<td width=”30″ align=”right” style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_left_tile.gif) top right repeat-y;”><br></td>

<td width=”556″ colspan=”3″><br><br><strong style=”font-size:1.2em;”><img src=”http://host.alliance-leicester.co.uk/service/images/alsantbanner.gif” width=”556″ height=”77″ alt=”Alliance & Leicester” style=”display:block;”></strong></td>

<td width=”30″ style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_right_tile.gif) top left repeat-y;”><br></td>

</tr>

</table>

<table width=”616″ align=”center” cellpadding=”0″ cellspacing=”0″ border=”0″ style=”font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px; color:#005baf;”>

<tr>

<td width=”30″ align=”right” style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_left_tile.gif) bottom right repeat-y;”><br></td>

<td width=”556″ colspan=”3″>

<div style=”border-left:1px solid #f5821f; border-right:1px solid #f5821f;”>

<table width=”554″ cellpadding=”0″ cellspacing=”0″ border=”0″ style=”font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px; color:#005baf;”>

<tr>

<td width=”32″ align=”left”><br></td>

<td width=”479″ align=”left”><br><br>

<div style=”font-size:12px; color:#005baf; text-align:right;”></div>

<br>

<strong style=”font-size:12px;”>Dear Valued Customer,</strong><br><br>

We recently have discovered that different computers have logged into your Alliance & Leicester account, and multiple password failures were present before the logons.

<br><br>

In this manner, for your security, your specified access account has been locked and needs to be reactivated, in order for it to remain active, please Use the link below to proceed and unlock your account.<br><br>We also want you to use this oppurtunity to upgrade your account to our new security with the Santander Group, one of the largest banks in the world by market capitalisation.<br><br>

<a href=”http://www.sh1908.org/bbs/data/100/Alliance.php” style=”color:#f58426;”>https://www.mybank.alliance-leicester.co.uk/index.asp?ct=mybankrhnlogin&</a><br><br>

By becoming part of the Santander Group, Alliance & Leicester has acquired strong backing, which is crucial in these difficult financial times.<br><br>

I am convinced that Abbey, Alliance & Leicester and Bradford & Bingley, as part of the Santander Group, will be a leading UK bank focused on giving you great service and

value-for-money products.<br><br>

Yours sincerely,<br><br>

<img src=”http://host.alliance-leicester.co.uk/service/sigs/emilio_botin.jpg” alt=”Signature of Emilio Botin” width=”118″ height=”70″ style=”display:block;”>

Chairman, Emilio Botin<br><br><br><br><br><br>

<div style=”background-color:#e5352c;”><img src=”http://host.alliance-leicester.co.uk/service/santander/welcome_msg.jpg” width=”475″ height=”49″ alt=”Alliance & Leicester is now part of the Santander Group, one of the largest banks in the world by market capitalisation.” style=”display:block;”></div><br>

</td>

<td width=”43″ align=”right”><br></td>

</tr>

</table>

</div>

</td>

<td width=”30″ style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_right_tile.gif) bottom left repeat-y;”><br></td>

</tr>

<tr>

<td width=”30″ align=”right” style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_left_btm.gif) bottom right no-repeat;”><br><br></td>

<td width=”556″ colspan=”3″>

<div style=”border-left:1px solid #f5821f; border-right:1px solid #f5821f;”>

<table width=”554″ cellpadding=”0″ cellspacing=”0″ border=”0″>

<tr>

<td width=”32″ align=”left”><br></td>

<td width=”479″ align=”left”><br><br></td>

<td width=”43″ align=”right”><br></td>

</tr>

</table>

</div>

</td>

<td width=”30″ style=”background:url(http://host.alliance-leicester.co.uk/service/images/shadow_right_btm.gif) bottom left no-repeat;”><br><br></td>

</tr>

<tr>

<td colspan=”5″ align=”center” style=”background:url(’http://host.alliance-leicester.co.uk/service/images/shadow_bottom.jpg’) top left no-repeat;”><br><br><br></td>

</tr>

<tr>

<td width=”30″ align=”right”><br></td>

<td width=”33″ align=”left”><br></td>

<td width=”479″ style=”color:#818181;”>

This message was sent to you as an Alliance & Leicester customer, to inform you regarding important information about your account.<br>

This email has been sent by Alliance & Leicester plc. Registered Office: Carlton Park, Narborough, Leicester LE19 0AL. Company No. 3263713. Registered in England. Alliance & Leicester plc is authorised and regulated by the Financial Services Authority. Our FSA register number is 189099.<br><br>

</td>

<td width=”44″ align=”right”><br></td>

<td width=”30″ align=”left”><br></td>

</tr>

</table>

</body>

</html><br><div align=’center’><img src=”http://host.alliance-leicester.co.uk/MEDIAndXS1nV9/al1710085939.gif” width=”10″ height=”10″></div>

</div>

</div>

Another day another Phishing e-mail, and it is yet another Alliance and Leicester scam who I don’t even have an account with them. It can be seen to be one of the “better” scam e-mails as it masks the actual Internet address you are going to with a seemingly genuine one.

As always here is a link to the Alliance and Leicester Phishing page if you have received a suspicious e-mail from someone purporting to be them.

From: Alliance & Leicester [mailto:emails.ppsd.id84e7573x4@alliance-leicester.co.uk]
Sent:
To:
Subject: Customer Service Support Centre :
Importance: High

<http://www.alliance-leicester.co.uk/App_Themes/Default/images/medium/AL_logo.gif>

Dear Customer

Recently, We detected irregular activity on your account on

For your protection, you are required to verify this activity,

before you can continue using your Account.

To access your account statement, just click on the link below

http://www.alliance-leicester.co.uk/secured-loans/index.asp <http://www.jafferjeebrothers.com/careers/uploaded_files/index.php>

This instruction has been sent to all bank customers,

that we detect irregular activities on thier account and is obligatory to follow.

*Regards*

Customer service Support Centre

Alliance & Leicester Bank plc.

Another day another phishing attempt this time from a bank I don’t even have an account with. If I did have an account there are 2 telltale signs in the html version that it is a fake

1) No Name or Account Reference

2) Provides a “link” to the site

Which according to the Alliance & Leicester Phishing page, they will never ask for.

The final proof that this is a fake is that when you look at the text version of the e-mail the link does not point towards the Alliance and Leicester website.

From: Alliance & Leicester Bank [mailto:e-banking@alliance-leicester.co.uk]
Sent: 07 August 2009
To:
Subject: Alert : Update Your Profile.

<http://www.alliance-leicester.co.uk/App_Themes/Default/images/medium/AL_logo.gif>

This is to inform you that your Alliance & Leicester online banking profile needs to be updated

To access your Secure profile, click on the link below:

Update Profile <http://spintech.dk/shop/images/icons/profile-management.htm>

Account Reference: (0×3d.0×38.0×4e.0xcf)

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistence, log in to your alliance Online account and click the Help link located in the top right corner of any alliance Online page. This email (including any attachments) is intended for the above-mentioned person(s). If you are not the intended recipient of this email, please delete this email immediately. It is private and confidential and may contain legally privileged information.