Author Topic: PHISHING: Alliance and Leicester - updating telephone contact details  (Read 8077 times)

0 Members and 1 Guest are viewing this topic.

Offline Anne

  • Administrator
  • Registered
  • *
  • Posts: 163
  • Gender: Female
    • Yobunny
Received this one today, needless to say it's not from Alliance and Leicester! It's yet another attempt to obtain account details - and I don't even have an A&L account!  :roll: The link to click to update your details actually goes to a different site entirely (DO NOT ENTER YOUR DETAILS THERE!) http://www.rayodark.com/

Interestingly, this email has a link at the top of it which says, "If you cannot see this email click here" and the link takes you to a legit page on the A&L website which is addressed to a named individual, so it looks like someone's A&L account has been compromised somehow.

Quote
Return-Path: <webmaster@consorcisg.cat>
Delivered-To: <email removed>
Received: (qmail 2311 invoked by uid 1024); 26 Mar 2011 10:20:42 -0000
Received: from webmaster@consorcisg.cat by server35.donhost.co.uk by uid 1002 with qmail-scanner-1.22
 ( Clear:RC:0(62.81.185.149):.
 Processed in 0.447907 secs); 26 Mar 2011 10:20:42 -0000
Received: from unknown (HELO admin.hosting.twentic.com) (62.81.185.149)
  by server35.lb.donhost.co.uk with SMTP; 26 Mar 2011 10:20:42 -0000
Received: from localhost (admin.hosting.twentic.com.local [127.0.0.1])
        by admin (Postfix) with ESMTP id 9EE1E78C07F
        for <email removed>; Sat, 26 Mar 2011 11:20:40 +0100 (CET)
Received: from admin.hosting.twentic.com ([127.0.0.1])
 by localhost (admin.hosting.twentic.com [127.0.0.1]) (amavisd-maia, port 10024)
 with ESMTP id 03287-09 for <email removed>;
 Sat, 26 Mar 2011 11:20:40 +0100 (CET)
Received: by admin (Postfix, from userid 2289)
        id 32FA778C348; Sat, 26 Mar 2011 11:18:55 +0100 (CET)
To: <email removed>
Subject: update your telephone contact details
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: alliance & leicester <suspiciousemails@alliance-leicester.co.uk>
Message-Id: <20110326101856.32FA778C348@admin>
Date: Sat, 26 Mar 2011 11:18:55 +0100 (CET)
X-Virus-Scanned: Maia Mailguard
X-Amavis-Alert: BAD HEADER Improper use of control character (char 0D hex) in message header 'MIME-Version': MIME-Version: 1.0\r\n
X-EsetId: 2E61252FDFB6786931672574DDE23C


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
        <head>
                <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
                <title>Alliance &amp; Leicester</title>
        </head>
        <body style="background-color: #ffffff;">
                <table cellpadding="0" cellspacing="0" width="593" align="center">
<tr>
        <td colspan="6">

                <table cellpadding="0" cellspacing="0" width="544" align="center">
                        <tr>
                                <td width="272" align="left" valign="top"><div align="left" style="font-family: Arial, Verdana, sans-serif; font-size:10px; color:#CCCCCC; width:272px;">Please add <a href="mailto:info@host.alliance-leicester.co.uk" target="_blank" style="font-family: Arial, Verdana, sans-serif;font-size: 10px;color: #CCCCCC;text-decoration: underline;">info@host.alliance-leicester.co.uk</a><br /> to your address book to ensure delivery</div></td>
                                <td width="272" align="right" valign="top"><div align="right" style="font-family:Arial, Verdana, sans-serif; font-size:10px; color:#CCCCCC; width:272px;">If you cannot see this email please <a href="http://host.alliance-leicester.co.uk/view.php?u=nnnY2PXQ&amp;c=al2908080028" target="_blank" style="font-family: Arial, Verdana, sans-serif;font-size: 10px;color: #CCCCCC;text-decoration: underline;">click here</a></div></td>                                       
                        </tr>
                </table>

        </td>
    </tr>                       
                        <tr>
                                <td width="593" colspan="6" height="7" style="background-image:url('http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_top.gif');" background="http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_top.gif"></td>
                        </tr>
                        <tr>
                                <td width="17" style="background-image:url('http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_left.gif');" background="http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_left.gif"></td>
                                <td width="1" bgcolor="#000000"></td>
                                <td width="32" bgcolor="#ffffff"></td>

                                <td width="332" style="font-family: Arial, Verdana,sans-serif; font-size:10px; color:#005baf;" valign="top">
                                <br />
                                        <img src="http://host.alliance-leicester.co.uk/alprospects/emtp09/logos.gif" alt="Alliance &amp; Leicester, part of the Santander group" width="350" height="61" style="display:block;font-family: Arial,Verdana,sans-serif; font-size:14px; color:#ff0000;" />
                                       
                                        <table cellpadding="0" cellspacing="0" width="332" align="left" style="font-family: Arial, Verdana,sans-serif; font-size:10px; color:#005baf;">
                                        <tr>
                                                <td width="332" colspan="2" height="38"></td>
                                        </tr>
                                       
                                        <tr>
                                                <td width="332" colspan="2" height="24"></td>

                                        </tr>                                   
                                        <tr>
                                                <td width="322">
                                                        <div style="font-family: Arial, Verdana,sans-serif; font-size:11px; color:#000000;">
                                                                Dear Customer<br /><br />
                                                                Alliance & Leicester is introducing a new automated telephone service to contact customers that have unusual transactions or spending patterns on their account to verify their payments.<br />

                                                                <br />please update your records now so that if we need to contact you, we have the right numbers to contact you on.<br />
<br />
                                                                <a href="http://www.rayodark.com/" style="font-family: Arial, Verdana,sans-serif; font-size:11px;text-decoration:underline;color:#ff0000;" target="_blank">Click here to update your telephone contact details.</a><br />

                                                                <br />
                                                                We hope we've been able to help.<br />
                                                                <br />
                                                                Yours sincerely<br />
                                                                <br /><br />

                                                                The eCommerce team<br />
                                                               
                                                        </div>

                                                </td>
                                                <td width="10"></td>
                                        </tr>
                                        </table>
                                </td>
                                <td width="191" bgcolor="#8d8a8a" valign="top" style="background-image:url('http://host.alliance-leicester.co.uk/alprospects/emtp09/right_bg.gif');" background="http://host.alliance-leicester.co.uk/alprospects/emtp09/right_bg.gif">

                                        <img src="http://host.alliance-leicester.co.uk/alprospects/emtp09/right_top.jpg" width="191" height="131" style="display:block;" />
                                        <a href="http://host.alliance-leicester.co.uk/redir.php?u=nnnY2PXQ&c=al2908080028&r=2091" target="_blank"><img src="http://host.alliance-leicester.co.uk/alprospects/emtp09/pebble.gif" width="191" height="191" style="display:block;background:#e6e7e8;font-weight:bold;font-family: Arial, Verdana,sans-serif; font-size:24px; color:#000000;text-align:center;" alt="Visit our site" border="0" /></a>

                                        <img src="http://host.alliance-leicester.co.uk/alprospects/emtp09/right_bottom.jpg" width="191" height="66" style="display:block;" />
                                       
                                        <table width="191" cellpadding="0" cellspacing="0">
                                                <tr>
                                                        <td width="26" bgcolor="#ffffff"></td>
                                                        <td width="4" bgcolor="#8d8a8a"></td>
                                                        <td width="158" bgcolor="#8d8a8a" height="100" valign="bottom" style="font-family: Arial,Verdana,sans-serif; font-size:10px; color:#ffffff;">
                                                                Alliance &amp; Leicester is now part
                                                                of the Santander Group, which
                                                                has more than 150 years'
                                                                experience in banking, and more
                                                                branches worldwide than any
                                                                other international bank.<br /><br />

                                                        </td>
                                                        <td width="2" bgcolor="#8d8a8a"></td>                                                   
                                                        <td width="1" bgcolor="#8d8a8a"></td>                                                                                                           
                                                </tr>
                                        </table>
                                </td>                                           
                                <td width="20" valign="top" style="background-image:url('http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_right.gif');" background="http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_right.gif"><img src="http://host.alliance-leicester.co.uk/alprospects/emtp09/roundel_right.gif" width="20" height="322" style="display:block;" /></td>                         
                        </tr>
                                               
                        <tr>
                                <td width="593" colspan="6" height="20" style="background-image:url('http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_bottom.gif');" background="http://host.alliance-leicester.co.uk/alprospects/emtp09/shadow_bottom.gif"></td>

                        </tr>   
<tr>
                                <td width="593" colspan="6" align="left" style="color:#acacac;">
                                        <table cellpadding="0" cellspacing="0" width="544" align="center">
                                        <tr>
                                                <td width="544" align="left" valign="top" style="color:#acacac;font-family: Arial, Verdana,sans-serif; font-size:10px;" >
<br />
Please do not reply to this message. This email address is not monitored so we are unable to respond to any messages sent to this address.<br />
<br />
As an additional security measure every customer email sent to you by Alliance &amp; Leicester Group will be addressed to you personally. Please report to <a href="mailto:suspiciousemails@alliance-leicester.co.uk" style="color:#acacac;font-family: Arial, Verdana,sans-serif; font-size:10px;text-decoration:none;"><u>suspiciousemails@alliance-leicester.co.uk</u></a> any email which appears to come from Alliance &amp; Leicester but is NOT addressed to you personally. We will never ask you to supply personal information such as passwords or other security information via email.<br />

If you are ever asked to supply this information in any email which appears to come from Alliance &amp; Leicester, please report this to <a href="mailto:suspiciousemails@alliance-leicester.co.uk" style="color:#acacac;font-family: Arial, Verdana,sans-serif; font-size:10px;text-decoration:none;"><u>suspiciousemails@alliance-leicester.co.uk</u></a><br />
<br />
The Alliance &amp; Leicester plc web site and products and services offered are only available to UK residents. The content of the web site and products/services offered are governed by and will be construed in accordance with English law. The Alliance &amp; Leicester web site uses a high level of encryption and the use of such encryption may be illegal in some countries outside of the UK. If you decide to use the Alliance &amp; Leicester web site outside the UK, we shall not be liable for any loss or damage suffered by you as a result.<br />
<br /> 
This marketing message was sent to you as an online prospect. If you would prefer not to receive prospect marketing from Alliance &amp; Leicester by email, please click here to <a href="http://host.alliance-leicester.co.uk/redir.php?u=nnnY2PXQ&c=al2908080028&r=2092" style="color:#acacac;font-family: Arial, Verdana,sans-serif; font-size:10px;">unsubscribe</a>.<br />

<br />
Calls are recorded or may be monitored for security, training and quality control purposes. Calls from UK landlines are free. Charges from mobile phones will vary.<br />
<br />
Alliance &amp; Leicester plc. Registered Office: Carlton Park, Narborough, Leicester LE19 0AL. Registered in England. Company Number: 3263713.<br />
<br />                         
                                                        </td>
                                        </tr>
                                </table>
                                </td>
                        </tr>

                                       
               
                </table>
        <BR>
<BR>

</body>
</html>

<div align='center'><img src='http://host.alliance-leicester.co.uk/MEDIAnnnY2PXQ/al2908080028.gif' width='10' height='10'><div>

Cheers, 
Anne, Board Admin

 

SMF spam blocked by CleanTalk