Be Net Aware

Another day another Phishing e-mail, and it is yet another Alliance and Leicester scam who I don’t even have an account with them. It can be seen to be one of the “better” scam e-mails as it masks the actual Internet address you are going to with a seemingly genuine one.

As always here is a link to the Alliance and Leicester Phishing page if you have received a suspicious e-mail from someone purporting to be them.

From: Alliance & Leicester [mailto:emails.ppsd.id84e7573x4@alliance-leicester.co.uk]
Sent:
To:
Subject: Customer Service Support Centre :
Importance: High

<http://www.alliance-leicester.co.uk/App_Themes/Default/images/medium/AL_logo.gif>

Dear Customer

Recently, We detected irregular activity on your account on

For your protection, you are required to verify this activity,

before you can continue using your Account.

To access your account statement, just click on the link below

http://www.alliance-leicester.co.uk/secured-loans/index.asp <http://www.jafferjeebrothers.com/careers/uploaded_files/index.php>

This instruction has been sent to all bank customers,

that we detect irregular activities on thier account and is obligatory to follow.

*Regards*

Customer service Support Centre

Alliance & Leicester Bank plc.

Another day another phishing attempt this time from a bank I don’t even have an account with. If I did have an account there are 2 telltale signs in the html version that it is a fake

1) No Name or Account Reference

2) Provides a “link” to the site

Which according to the Alliance & Leicester Phishing page, they will never ask for.

The final proof that this is a fake is that when you look at the text version of the e-mail the link does not point towards the Alliance and Leicester website.

From: Alliance & Leicester Bank [mailto:e-banking@alliance-leicester.co.uk]
Sent: 07 August 2009
To:
Subject: Alert : Update Your Profile.

<http://www.alliance-leicester.co.uk/App_Themes/Default/images/medium/AL_logo.gif>

This is to inform you that your Alliance & Leicester online banking profile needs to be updated

To access your Secure profile, click on the link below:

Update Profile <http://spintech.dk/shop/images/icons/profile-management.htm>

Account Reference: (0×3d.0×38.0×4e.0xcf)

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistence, log in to your alliance Online account and click the Help link located in the top right corner of any alliance Online page. This email (including any attachments) is intended for the above-mentioned person(s). If you are not the intended recipient of this email, please delete this email immediately. It is private and confidential and may contain legally privileged information.

This e-mail is a fairly standard Phishing e-mail where they threaten to close your account unless you respond. At first glance if you open in html it looks official and appears to come from a legitimate e-mail address, though it states new-egg.com not egg.com. It should also be noted it is fairly easy to spoof an e-mail address anyway.

however the plain text versions shows you will be directed to a different site

From: Egg Bank Plc [mailto:e-bank@new-egg.com]
Sent: 05 August 2009
To: my-private-email
Subject: You Have 1 New Message.

go to Egg home <http://ubon.go.th/_admin/common/htmlarea02/popups/customer.htm>

Dear Egg Customer,

We are contacting you to remind you that our account review team identified some unusual activity in your account.

Security measures are been taking by the bank in order to keep you safe from this act. By so doing we hereby implore you to click on the secure page below,we will send you your new information three(3)days after you have submitted your details

Click here to see all your accounts <http://ubon.go.th/_admin/common/htmlarea02/popups/customer.htm>