Tuesday 22 April 2008

NatWest | Technical Notice: Recent Change In Your Personal Information

It's the usual 'multiple attempts have caused you to be suspended' phishing email. In my experience, when this sort of thing happens for real they telephone or write to you.

The destination URL is http://www.busterspetalumacafe.com/joomla/mambots/verify/detr.php - very similar to yesterday's A&L email (http://www.busterspetalumacafe.com/joomla/mambots/verify/alli.htm). So doesn't look like the owners have fixed the break in to their website yet.

Here's the content:

We are committed to protecting you when you bank with us. Our banking services are designed with your security in mind.

Our Online Banking Security Team observed multiple logons on your account, from different IP's

For your security, your online banking profile has been restricted.

Please click on VERIFY below to be able to claim ownership of account.

VERIFY

Thank you


ref kj-t

No comments: