Tuesday 22 April 2008

Natwest | Your account access has been temporarily restricted

I've recieved this email 5 times over night, each to different email addresses. The email looks very similar to the 1st March NatWest email, excpet the 'advert' at the bottom has changed.

This one has obviously been sent in batches of 15 emails - as all of the 15 email addresses are shown in the to: field. If you needed convincing it's phishing - this would be it. Why would they send the email to 15 people with similar email addresses at the same time - thus revealing their customers' details. Banks don't ask for information from you this way - don't divulge it!

The actual target URL is http://nwolb.com.c8ca237dcb.com/default.aspxrefererident=GA60917E554A67117F945DHC5726787123A5A0E052K8&cookieid=791230&noscr=true/index.php. c8ca237dcb.com already appears in a few phishing results in Google.

Here's the content, don't touch the email!

Automated Security Notice

• As part of our security measures, We believe that, in everything else,
you deserve the best in banking too. Therefore protective measures is
been applied to satisfy our striving costumer needs. Our technical
service department is currently upgrading our SSL servers to enhance
adequate banking security, to give our costumers a better, fast and
secure online banking service. We noticed several unsuccessful login
attempts and therefore have decided to temporarily restrict your online
access. To regain access to your online banking Please click on
• Online Banking Logon to continue the verification process.
• (Failure to verify your Online Access service changes will lead to account
disconnection)

Thank you.
Online Banking Security Team
NatWest Internet Banking.
(c)2007 All Rights Reserved

No comments: