Bill Williams (IT): Support Site
[home]
|
[profile]
|
[register]
|
[help]
|
[Contact Us]
Revise:
Note: You must be registered in order to post a Topic or Comment.
To register,
click here
.
Note: Only the poster of this message, and the moderator can edit the message.
Your UserName:
Your Passkey:
Forgot your passkey?
[Click Here]
Byline:
for Staff use.
Body Text:
For a guide to
embellishing
the text,
click
here
Some attempts to gain password info are very simple and just use fake emails. For example this one: [quote] Dear Lloyds TSB Online Customer, In the event of providing a more secure environment for online activities, we periodically screen accounts and restrictions were placed on your account in the process, due to suspicious account activities. To regain full access to your account please by fill in all the details that are required to complete this verification process. To do this we developed a new secure way that keeps your banking safe, we have attached a form to this email to complete this process. Please download the form and follow the instructions on your screen. If you choose to ignore our request, you leave us no choice but to temporary suspend your account. Sincerely, The Lloyds TSB Security Department ~~~~~~~~~ Attachment: restricted.htm [/quote] Now in a lot of cases the attachment 'type' would also be a fake and it would actually directly install a trojan in the victim's system. So I investigated this one carefully under a Linux operating system and found it actually was a real HTM file (i.e. a web page in a file instead of on a server) so I inspected it. It is all 'charmingly' simple, it just asks you ALL the details needed to get all you money from bank and credit card and then instead of sending that info to Lloyds bank it sends it to an un-named server belonging to the cyber-crim. If you were foolish enough to open the attachment you would see the request form shown below. No seasoned Internet user would fall for this one I hope, but a naive user only recently introduced to the Internet could easily fall for it. The scam is stupidly assisted by the fact that the real Lloyds bank does not prevent its images of the logo etc from being used by web-pages that are not on the Lloyds website. So the fake page below carries genuine logo's which would conveniently be kept up to date by the bank itself. ~~~~ [red]For anyone reading this, please note for future reference. NO REAL BANK WOULD EVER SEND OUT SUCH AN EMAIL REQUEST to re-affirm your login details etc.!! If you get such an email jjust delete it immediately. [/red] [imgl]http://www.datahighways.co.uk/support/images/frauds/FakeLLoyds.gif[/imgl] [br][/br] Bill.
Check here to include your profile signature.
Check here Remember Details.
Go to Home Page