AVIRA Virus Description Halifax 28 Full description

Target:	Halifax
Date discovered:	02/11/2008

General The goal is to get the following information:
    • Bank account
    • Personal data
    • Email account

Phishing method:
    • URL link

Email Details From: onlineservice@halifax.co.uk
Subject: Periodical Review ************

Visible link: https://www.halifax-online.co.uk/update/straightup.no/language/Login...
Actual link: http://www.tomatonet.com/home/pages/info/halifax.co.uk/index.php
IP address: 222.237.76.32

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: http://www.tomatonet.com/home/pages/info/halifax.co.uk/index.php
Actual URL: http://www.tomatonet.com/home/pages/info/halifax.co.uk/index.php
IP address: 222.237.76.32

The phishing page will look like the following:

See a brief description here.

Inserted by Dominik Auerbach
on 03 Nov 2008 10:53 (GMT +1)

Should you like to make your voice heard, please fill in our Virus Description Survey here. You may tell us what you think about this description.

Halifax 28 - Phishing