Thai Page Impersonating The Halifax Bs

[Richard W]

I just got an e-mail purporting to come from the Halifax BS, asking me to log into my account to clear some security problem. The address given to click on was:

http://www.luktungthai.com/chat/appdata/s/.../formslogin.php

In the same directory, there was also:

http://www.luktungthai.com/chat/appdata/s/online/[secure.halifax.co.uk]

I've reported it to the Halifax (or their agents?) as instructed at http://www.halifax.co.uk/SecurityandPrivac...shingemail.asp# . What else, if anything, should I do? I am not in Thailand.

Richard.

[Maestro]

You’ve done everything that was necessary and useful. You have informed Halifax, and they will take it from there, and you have posted this phishing attempt here to warn others, which was very thoughtful of you.

--

Maestro

[endure]

If you go to the home page (http://www.luktungthai.com/) it looks as though it's been hacked as the control panel for the whole site is availalble to edit. I can't ee any method of informing luktungthai.com either.

[Totster]

When I go to the first link I get a warning from Firefox.. which is nice !

totster

[taxexile]

the microsoft phishing filter doesnt pick it up.

i reported it.

[youbet]

the microsoft phishing filter doesnt pick it up.

i reported it.

did you really expect it too?

[Khun Jack]

I just got an e-mail purporting to come from the Halifax BS, asking me to log into my account to clear some security problem. The address given to click on was:

http://www.luktungthai.com/chat/appdata/s/.../formslogin.php

In the same directory, there was also:

http://www.luktungthai.com/chat/appdata/s/online/[secure.halifax.co.uk]

I've reported it to the Halifax (or their agents?) as instructed at http://www.halifax.co.uk/SecurityandPrivac...shingemail.asp# . What else, if anything, should I do? I am not in Thailand.

Richard.

I deleted the formslogin.php five minutes ago by using the control panel on the lukthungthai website.

See what happens next, have mailed the webmaster.

[Richard W]

They've hacked another Thai site - http://www.seasphoto.com the offending page is

http://www.seasphoto.com/resources/library/archive/original/ ol/nationwide/default.php . I've left a space in the URL because one is advised not to view such pages.