A cleverly designed email targets online banking credentials

Mar 26, 2012 17:51 GMT  ·  By

It’s not uncommon for Halifax bank customers to be targeted by phishers. Currently, a new scam email is making the rounds, informing recipients on the introduction of a new online banking authentication procedure starting with March 23, 2012.

Bearing the subject “IMPORTANT - Halifax Online Service Message”, the phony email, provided by Hoax Slayer looks something like this:

Dear Customer,

Please note that starting from March 23, 2012 we will be introducing new online banking authentication procedures in order to protect the private information of all online banking users.

You are required to confirm your online banking details with us as you will not be able to have access to your accounts until this has been done.

As you're already registered for online banking all you need to do is to confirm your online banking details.

Confirm your details

Once you've completed this you'll be able to manage your money whenever you want, giving you more control of your finances.

Best wishes,

Security Team Halifax Online Service If the “Confirm your details” link is clicked, the unsuspecting Internet user is redirected to a phishing site that requests a username and password.

Once the login credentials are entered another form appears asking for other details such as name, telephone banking PIN, date of birth and the account recovery question.

After submitting the information, the victim is taken to the legitimate website of Halifax UK in order to avoid raising any suspicion.

Unfortunately for the user, at this point all the data is safely stored in a database controlled by the crooks, allowing them to gain access to the online banking account from which they can make illegal transfers.

Internauts are advised to ignore such claims and report the malicious emails to the bank. Those who have already completed the form and provided the phishers with their account details are recommended to immediately contact the financial institution, which can take the appropriate measures to protect the account’s integrity.

Note. My Twitter account has been erroneously suspended. While this is sorted out, you can contact me via my author profile.