Internet security company Websense has warned customers
of the Alliance & Leicester bank they are the targets of a new
phishing attack.
Customers receive a spoofed e-mail claiming that a new security
upgrade at the bank requires them to verify their account
information by visiting a link contained in the e-mail.
The link leads to a fake Alliance & Leicester site that
requests their customer ID, password and PIN, before redirecting
the user to the legitimate website of the bank.
The phishing site is hosted in Korea and was still operating at
the time of Websense’s alert.