A&L targeted by phishers

MarkyMarkD

A&L has today been targeted by phishers. If you receive an e-mail purportedly from A&L, don't click any links in it - use the normal website address to access the internet banking service.

If you have clicked such a link, contact A&L immediately to get your account closed down!

Smiley_Mum

Hi,

I received such an email and have sent it to A&L fraud department (thanks to Ted H for the info) for them to investigate. I don't even have an account with A&L???

[img]cid:abstractly.gif[/img]
Dear Alliance-Leicester Client,
We are glad to inform you, that our bank has a new
security system. The new updated technology will ensure
the security of your payments trough our bank.

Hoping you understand that we are doing this for your
own safety we suggest you to access the following link to
verify your online account.

We ask you to follow this link to confirm your account information

Alliance-Leicester Data Processing Department.

__________ NOD32 1.1172 (20050718) Information __________

This message was checked by NOD32 antivirus system.
http://www.eset.com

bargains83

Domain Name : ALLIIANCE-LEICESTER.COM
Created On : 2005-07-19
Expiration Date : 2006-07-18
Status : ACTIVE
Registrant Name : Kirk *******
Registrant Street1 : ** Galliano Lane Apt. # A
Registrant City : St. Louis
Registrant State/Province : MO
Registrant Postal Code : 63129
Registrant Country : US
Admin Handle : KB02865
Admin Name : Kirk *******
Admin Street1 : ** Galliano Lane Apt. # A
Admin City : St. Louis
Admin State/Province : MO
Admin Postal Code : 63129
Admin Country : US
Admin Phone : *Telephone Number Removed by Board Guide*
Admin Email : *Email Address Removed by Board Guide*
Tech Handle : KB02865
Tech Name : Kirk *******
Tech Street1 : ** Galliano Lane Apt. # A
Tech City : St. Louis
Tech State/Province : MO
Tech Postal Code : 63129
Tech Country : US
Tech Phone : *Telephone Number Removed by Board Guide*
Tech Email : *Email Address Removed by Board Guide*
Billing Handle : KB02865
Billing Name : Kirk *******
Billing Street1 : ** Galliano Lane Apt. # A
Billing City : St. Louis
Billing State/Province : MO
Billing Postal Code : 63129
Billing Country : US
Billing Phone : *Telephone Number Removed by Board Guide*
Billing Email : *Email Address Removed by Board Guide*
Name Server : NS1.LIRLAEDA.NET
Name Server : NS1.LIRLUEDA.NET
Registrar Name : NAMEBAY
Registrar WebSite : *URL Removed by Board Guide*

MarkyMarkD

Smiley_Mum wrote:

Hi,

I received such an email and have sent it to A&L fraud department (thanks to Ted H for the info) for them to investigate. I don't even have an account with A&L???

Not having an account with them doesn't mean anything! These phishers don't get your e-mail address from your bank, they just randomly harvest e-mail addresses from anywhere they can and send out these mails in the name of any bank they have bothered to clone the site of.

I've had them from dozens of different banks worldwide - some in the UK, some in the US, and some in German even for German banks.

isasmurf

Smiley_Mum wrote:

Hi,

I received such an email and have sent it to A&L fraud department (thanks to Ted H for the info) for them to investigate. I don't even have an account with A&L???

[img]cid:abstractly.gif[/img]
Dear Alliance-Leicester Client,
We are glad to inform you, that our bank has a new
security system. The new updated technology will ensure
the security of your payments trough our bank.

Hoping you understand that we are doing this for your
own safety we suggest you to access the following link to
verify your online account.

We ask you to follow this link to confirm your account information

Alliance-Leicester Data Processing Department.

__________ NOD32 1.1172 (20050718) Information __________

Do NOT click on any link in this post!

Highland_Lass_2

I had one of these on Saturday but it was from Lloyds TSB. I don't even have an account with them but AOL picked up on this, thankfully.

MarkyMarkD

isasmurf wrote:

Do NOT click on any link in this post!

The link doesn't work - the site's already been closed down (presumably at A&L's instigation).

bargains83

Its some bloke based in the USA who owns the domain name. Although a moderator has edited my post where I posted the domain report and blocked that information out presumably for legal reasons. IMO though these people should be named and shamed because they are a joke.

The cheek of registering a domain name with an extra 'i' in it to confuse consumers. I bet a few people have fallen for that website as well, I really do not know how some people sleep at night! :mad: