Monday 21 April 2008

Alliance and Leicester | Security Notice: Unable to Verify Your Account Dated 21 April 2008

Alliance & Leicester Phishing EmailsThis one is aimed at the Alliance And Leicester customers. Not had any for these since November.

Strangely, it was sent to the same email address twice in 6 minutes. What I did notice though was that although it was received at about 10:30, the times actually say 05:22 and 05:28. Obviously sent from a time zone currently 5 hours behind BST.

It is sent individually to the name email address, which not only helps it get through more spam blockers but also makes it more realistic. But the email is badly written - "Our Technical Security Observe Multiple Error Logins" - not exactly English!

No bank would ever email you asking you to click a link to verify ownership. If they already knew your email address, why would you then need to again prove it? And they certainly wouldn't use a link http://www.busterspetalumacafe.com/joomla/mambots/verify/alli.htm. When I searched for the URL in Google, one of the first results back was "HackeD By UyuSsman ( Turkish Hacker )" - so we know what's happening there!

Here's the email content:

Unable to Verify Your Account 21 April 2008
We have been unable to verify your account with us.

Our Technical Security Observe Multiple Error Logins from your Customer ID, Please do verify your account by clicking on the ACCOUNT VERIFICATION below to prove account ownership .

No comments: