A real estate company's website has been hijacked to serve in this scheme

Aug 9, 2012 10:59 GMT  ·  By

Lloyds customers are advised to be on the lookout for phishing emails which urge them to verify their accounts to avoid their service being suspended.

Lloyds TSB Bank is already having enough problems with its ex online security chief admitting to defrauding the financial institution by more than £2.4 million (3 million EUR or $3.7 million).

Now, cybercriminals are making things difficult for their customers as well, attempting to steal valuable information that could allow them to gain access to accounts.

“Valued Customer, Incoming payments are pending on your Lloyds TSB account. Reason: The personal details section of your account contains Incomplete or incorrect information. Please verify your account information for all payments to be approved,” reads the email sample provided by millersmiles.co.uk.

“Follow the link below to resolve immediately. [LINK] NOTE: You are strictly advised to match your information correctly to avoid service suspension,” the notification continues.

The link points to a compromised real estate website from the US on which the cybercriminals have planted their own malicious webpage. This page tries to replicate the financial institution’s website in an attempt to gather sensitive details.