In fact, it's a scattergun approach. People who aren't customers of Lloyds, Nationwide or other banks get sent the dangerous spams in the hope that sooner or later an innocent and naive customer will get one.
We revealed first yesterday that Halifax customers were being targeted, causing the bank to down its web site as a precaution.
The latest emal, reproduced below, includes a URL where the first part is ignored. A click through then goes to the spoof site and invokes a login box, and forwards the main Window to the genuine Lloyds website.
So people that make a mistake go to the real Lloyds website and get a fake pop up box in which those foolish enough to give away their details, give away their details.
Lloyds
From: Verification [mailto:verify43@lloydstsb.com] On Behalf Of Verification
Sent: 27 October 2003 16:37
To: [Name suppressed, Ed.]
Subject: VERIFY YOUR E-MAIL ON LLOYDS BANK: [Email suppressed, Ed.]
Dear Lloyds Bank Member,
This email was sent by the Lloyds server to verify your e-mail address. You must complete this process by clicking on the link below and entering in the small window your Lloyds Customer Number, Passnumber and Memorable Data. This is done for your protection --- because some of our members no longer have access to their email addresses and we must verify it.
To verify your e-mail address and access your bank account, click on the link below. If nothing happens when you click on the link (or if you use AOL), copy and paste the link into the address bar of your web browser.
http://www.lloydstsb.com:ac-x6LC0IQr2aBda1XBALgF@qdh0g9bf.cJb.NeT/?LdZJtDpTt 8z1elD
Nationwide
Dear Nationwide Bank Member,
This email was sent by the Nationwide server to verify your e-mail address. You must complete this process by clicking on the link below and entering in the small window your Nationwide Customer Number, Passnumber and Memorable Data. This is done for your protection --- because some of our members no longer have access to their email addresses and we must verify it.
To verify your e-mail address and access your bank account, click on the link below. If nothing happens when you click on the link (or if you use AOL), copy and paste the link into the address bar of your web browser.
http://www.nationwide.co.uk:ac=pQ1iC2KgnUXhnyeXTuda@ShOrTwAy.To/va0gbd/?QPlw5R5TXDwmvyG