Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

phishing email

Options
  • 18-06-2012 12:06pm
    #1
    Registered Users Posts: 249 ✭✭


    Just got this. If you click on the links you get a screen looking VERY much like banking 365 online.

    Return-path: <postmaster@noticiasdecontagem.com.br>
    Envelope-to: *** REMOVED ***
    Delivery-date: Mon, 18 Jun 2012 11:52:39 +0100
    Received: from web5.task.com.br ([174.36.74.102]:58297)
    	by *** REMOVED *** with esmtp (Exim 4.77)
    	(envelope-from <postmaster@noticiasdecontagem.com.br>)
    	id 1SgZZS-002Xr3-UP
    	for *** REMOVED ***; Mon, 18 Jun 2012 11:52:39 +0100
    Received: from localhost (localhost [127.0.0.1])
      (uid 33)
      by web5.task.com.br with local; Mon, 18 Jun 2012 07:51:17 -0300
      id 00000000000692D8.000000004FDF0825.00006895
    To: *** REMOVED ***
    Subject: Alert.info@boimail.com
    From: Bank of Ireland <info@boimail.com>
    Reply-To:
    Mime-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: 8bit
    Message-ID: <courier.000000004FDF0825.00006895@web5.task.com.br>
    Date: Mon, 18 Jun 2012 07:51:17 -0300
    X-Spam-Status: No, score=2.5
    X-Spam-Score: 25
    X-Spam-Bar: ++
    X-Ham-Report: Spam detection software, running on the system "*** REMOVED ***", has
     identified this incoming email as possible spam.  The original message
     has been attached to this so you can view it (if it isn't spam) or label
     similar future email.  If you have any questions, see
     the administrator of that system for details.
     
     Content preview:  Please add Bank of Ireland to your address book to ensure
        that our emails reach your inbox Exclusively for 365 online and phone customers,
        you can open one of our new savings or deposit accounts without even leaving
        the comfort of your own home. [...] 
     
     Content analysis details:   (2.5 points, 4.5 required)
     
      pts rule name              description
     ---- ---------------------- --------------------------------------------------
     -0.0 SPF_PASS               SPF: sender matches SPF record
      0.6 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image area
      0.0 HTML_MESSAGE           BODY: HTML included in message
      0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                                 [score: 0.5014]
      0.7 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
      0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
    X-Spam-Flag: NO
    
    
    
    <font style="font-size: 10px;" color="#666666" face="Arial">Please add Bank of Ireland to your address book to ensure that our emails reach your inbox</font></div></td></tr></tbody></table></td></tr><tr><td style="padding: 0px;" align="center"><table align="left" cellpadding="0" cellspacing="0" height="100%" width="100%"><tbody><tr align="left" valign="top"><td style="padding: 10px 31px 25px 10px;" align="left" valign="top" width="329"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="left"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/Banner-Graphic2.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="Bank of Ireland - A new way to open deposit accounts" height="285" width="288"></td></tr></tbody></table></td><td style="padding: 10px 0px 0px;" align="left" valign="bottom" width="290"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td height="104"></td></tr><tr><td style="padding: 0px;" align="left"><a href="http://diyarbakirevdeneve.com/images/zukask/zukask/boi/authentication1.htm" name="1376f25685bafe99_Click here for more information" target="_blank"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/Clock-1new.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="Click here for more information" height="206" width="290"></a></td></tr></tbody></table></td><td width="0"></td></tr></tbody></table></td></tr><tr><td style="padding: 0px;" align="center"><table align="left" cellpadding="0" cellspacing="0" height="100%" width="100%"><tbody><tr align="left" valign="top"><td style="padding: 0px 0px 10px 10px;" align="left" valign="top" width="82%"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="left"><div align="left"><font style="font-size: 12px;" color="#00426C" face="Arial">Exclusively for 365 online and phone customers, you can open one of our new savings or deposit accounts without even leaving the comfort of your own home.</font></div></td></tr><tr><td height="13"></td></tr><tr><td style="padding: 0px;" align="left"><div align="left"><font style="font-size: 12px;" color="#333333" face="Arial">This is the paper free way to open your new savings account today with either a few clicks or over the phone. As part of our ongoing efforts to make it easier for you to use
    our online services, we have revised the 365online E-Sign Consent
    and Online Access Agreement that you reviewed and accepted when you
    began to use <i>365online&#65533;</i></font></div></td></tr><tr><td height="13"></td></tr><tr><td style="padding: 0px;" align="left"><div style="width: 415px;" align="left"><font style="font-size: 12px;" color="#333333" face="Arial">Terms and conditions apply to 365 savings accounts. These are available on <a href="http://diyarbakirevdeneve.com/images/zukask/zukask/boi/authentication1.htm" name="1376f25685bafe99_bankofireland.com" style="text-decoration: none; color: rgb(51, 51, 51);" target="_blank">bankofireland.com</a></font></div></td></tr></tbody></table></td><td style="padding: 0px 0px 0px 20px;" align="right" valign="top" width="215"><table align="right" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="right"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/Clock-3.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="" height="75" width="192"></td></tr></tbody></table></td><td width="0"></td></tr></tbody></table></td></tr><tr><td style="padding: 0px;" align="center"><table align="left" cellpadding="0" cellspacing="0" height="100%" width="100%"><tbody><tr align="left" valign="top"><td style="padding: 10px;" align="left" valign="middle" width="83%"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td height="8"></td></tr><tr><td style="padding: 0px;" align="left"><div align="left"><font style="font-size: 16px;" color="#00426C" face="Arial"><b>To review the changes </b><a href="http://diyarbakirevdeneve.com/images/zukask/zukask/boi/authentication1.htm" name="1376f25685bafe99_For further details click here" style="color: rgb(0, 66, 108);" target="_blank"><b><u>click here</u></b></a><b>.</b></font></div></td></tr><tr><td height="8"></td></tr></tbody></table></td><td style="padding: 10px;" align="right" valign="top" width="203"><table align="right" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="right"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/BOI-lozenge-2.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="Bank of Ireland" height="43" width="203">
    


Comments

  • Registered Users Posts: 706 ✭✭✭oB1


    frost wrote: »
    Just got this. If you click on the links you get a screen looking VERY much like banking 365 online.

    Return-path: <postmaster@noticiasdecontagem.com.br>
    Envelope-to: *** REMOVED ***
    Delivery-date: Mon, 18 Jun 2012 11:52:39 +0100
    Received: from web5.task.com.br ([174.36.74.102]:58297)
    	by *** REMOVED *** with esmtp (Exim 4.77)
    	(envelope-from <postmaster@noticiasdecontagem.com.br>)
    	id 1SgZZS-002Xr3-UP
    	for *** REMOVED ***; Mon, 18 Jun 2012 11:52:39 +0100
    Received: from localhost (localhost [127.0.0.1])
      (uid 33)
      by web5.task.com.br with local; Mon, 18 Jun 2012 07:51:17 -0300
      id 00000000000692D8.000000004FDF0825.00006895
    To: *** REMOVED ***
    Subject: Alert.info@boimail.com
    From: Bank of Ireland <info@boimail.com>
    Reply-To:
    Mime-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: 8bit
    Message-ID: <courier.000000004FDF0825.00006895@web5.task.com.br>
    Date: Mon, 18 Jun 2012 07:51:17 -0300
    X-Spam-Status: No, score=2.5
    X-Spam-Score: 25
    X-Spam-Bar: ++
    X-Ham-Report: Spam detection software, running on the system "*** REMOVED ***", has
     identified this incoming email as possible spam.  The original message
     has been attached to this so you can view it (if it isn't spam) or label
     similar future email.  If you have any questions, see
     the administrator of that system for details.
     
     Content preview:  Please add Bank of Ireland to your address book to ensure
        that our emails reach your inbox Exclusively for 365 online and phone customers,
        you can open one of our new savings or deposit accounts without even leaving
        the comfort of your own home. [...] 
     
     Content analysis details:   (2.5 points, 4.5 required)
     
      pts rule name              description
     ---- ---------------------- --------------------------------------------------
     -0.0 SPF_PASS               SPF: sender matches SPF record
      0.6 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image area
      0.0 HTML_MESSAGE           BODY: HTML included in message
      0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                                 [score: 0.5014]
      0.7 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
      0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
    X-Spam-Flag: NO
    
    
    
    <font style="font-size: 10px;" color="#666666" face="Arial">Please add Bank of Ireland to your address book to ensure that our emails reach your inbox</font></div></td></tr></tbody></table></td></tr><tr><td style="padding: 0px;" align="center"><table align="left" cellpadding="0" cellspacing="0" height="100%" width="100%"><tbody><tr align="left" valign="top"><td style="padding: 10px 31px 25px 10px;" align="left" valign="top" width="329"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="left"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/Banner-Graphic2.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="Bank of Ireland - A new way to open deposit accounts" height="285" width="288"></td></tr></tbody></table></td><td style="padding: 10px 0px 0px;" align="left" valign="bottom" width="290"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td height="104"></td></tr><tr><td style="padding: 0px;" align="left"><a href="http://diyarbakirevdeneve.com/images/zukask/zukask/boi/authentication1.htm" name="1376f25685bafe99_Click here for more information" target="_blank"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/Clock-1new.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="Click here for more information" height="206" width="290"></a></td></tr></tbody></table></td><td width="0"></td></tr></tbody></table></td></tr><tr><td style="padding: 0px;" align="center"><table align="left" cellpadding="0" cellspacing="0" height="100%" width="100%"><tbody><tr align="left" valign="top"><td style="padding: 0px 0px 10px 10px;" align="left" valign="top" width="82%"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="left"><div align="left"><font style="font-size: 12px;" color="#00426C" face="Arial">Exclusively for 365 online and phone customers, you can open one of our new savings or deposit accounts without even leaving the comfort of your own home.</font></div></td></tr><tr><td height="13"></td></tr><tr><td style="padding: 0px;" align="left"><div align="left"><font style="font-size: 12px;" color="#333333" face="Arial">This is the paper free way to open your new savings account today with either a few clicks or over the phone. As part of our ongoing efforts to make it easier for you to use
    our online services, we have revised the 365online E-Sign Consent
    and Online Access Agreement that you reviewed and accepted when you
    began to use <i>365online&#65533;</i></font></div></td></tr><tr><td height="13"></td></tr><tr><td style="padding: 0px;" align="left"><div style="width: 415px;" align="left"><font style="font-size: 12px;" color="#333333" face="Arial">Terms and conditions apply to 365 savings accounts. These are available on <a href="http://diyarbakirevdeneve.com/images/zukask/zukask/boi/authentication1.htm" name="1376f25685bafe99_bankofireland.com" style="text-decoration: none; color: rgb(51, 51, 51);" target="_blank">bankofireland.com</a></font></div></td></tr></tbody></table></td><td style="padding: 0px 0px 0px 20px;" align="right" valign="top" width="215"><table align="right" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="right"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/Clock-3.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="" height="75" width="192"></td></tr></tbody></table></td><td width="0"></td></tr></tbody></table></td></tr><tr><td style="padding: 0px;" align="center"><table align="left" cellpadding="0" cellspacing="0" height="100%" width="100%"><tbody><tr align="left" valign="top"><td style="padding: 10px;" align="left" valign="middle" width="83%"><table align="left" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td height="8"></td></tr><tr><td style="padding: 0px;" align="left"><div align="left"><font style="font-size: 16px;" color="#00426C" face="Arial"><b>To review the changes </b><a href="http://diyarbakirevdeneve.com/images/zukask/zukask/boi/authentication1.htm" name="1376f25685bafe99_For further details click here" style="color: rgb(0, 66, 108);" target="_blank"><b><u>click here</u></b></a><b>.</b></font></div></td></tr><tr><td height="8"></td></tr></tbody></table></td><td style="padding: 10px;" align="right" valign="top" width="203"><table align="right" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="padding: 0px;" align="right"><img src="http://media.boimail.com/Files/810/Image/Online%20Savings%20Account/BOI-lozenge-2.png" style="border-style: none; display: block; padding: 0px; margin: 0px;" alt="Bank of Ireland" height="43" width="203">
    

    Yep that's got to be 110% a phishing site!!


  • Closed Accounts Posts: 354 ✭✭Bank of Ireland: Pat


    Hi frost,

    Thanks for getting in touch. In the last week we have sent out promotional material to some customers. The most recent was the second in a series of four emails. It was issued to let customers know about recent service improvements to our Banking365 online and telephone services. We will never ask for any personal or login details in any emails that we send to our customers.
    info@boimail.com is an email address that we would use to send promotional info for new or existing Bank of Ireland products and services. But as I said above, we will never ask you for any personal details.

    Any promotional material we send you will also give you the option to unsubscribe. If you would like to unsubscribe to these promotional emails, you can click on the unsubscribe link at the bottom of the email.

    If for any reason you think an email may be fake, we would always urge you to ignore the content and forward it on to our security department.

    Thanks
    Pat


  • Registered Users Posts: 706 ✭✭✭oB1


    Hi frost,

    Thanks for getting in touch. In the last week we have sent out promotional material to some customers. The most recent was the second in a series of four emails. It was issued to let customers know about recent service improvements to our Banking365 online and telephone services. We will never ask for any personal or login details in any emails that we send to our customers.



    Thanks
    Pat

    Hi Pat,

    I think what the OP is trying to achieve, is reporting the phishing website.

    Did you follow the link - its VERY Dodgy - it might be worth putting out some form of warning to others.


  • Closed Accounts Posts: 354 ✭✭Bank of Ireland: Pat


    Hi,

    I understand what you mean. Our customers' security is very important to us. We would always advise our customers to contact us immediately with any security concerns that they might have.

    If you ever receive any emails claiming to be from Bank of Ireland that you are in any way unsure about, we ask that you don't try to open any links included and forward it on to 365security@boimail.com. Once you have forwarded it on, we would advise that you delete it straight away.

    I'll pass on the information included in the spam report that was in the original post. I would appreciate it if you would forward on the email as well, if possible.

    If there's anything else I can do for you, just let me know.

    Thanks
    Pat


  • Closed Accounts Posts: 354 ✭✭Bank of Ireland: Pat


    Hi all,

    I just wanted to update you that the website in the link mentioned above has now been shut down.

    Thanks again,
    Pat


  • Advertisement
  • Registered Users Posts: 706 ✭✭✭oB1


    Hi all,

    I just wanted to update you that the website in the link mentioned above has now been shut down.

    Thanks again,
    Pat

    Excellent Pat, thanks for the update!

    Rob


Advertisement