PDA

View Full Version : Allied Irish Bank - various Phish



Garreg Ddu
09-14-2009, 01:31 PM
I have had several AIB phish recently, but have not had a chance to post them. This one is a strange, as it does not follow the normal phishing format.

From =?ISO-8859-1?B?QWxsaWVkIElyaXNoIEJhbms=?= Mon Sep 14 04:40:08 2009
X-Apparently-To: ******.*********@******.*** via 76.13.12.207; Sun, 13 Sep 2009 21:40:41 -0700
Return-Path: <win@aib.ie>

X-Originating-IP: [209.165.162.162]

Origin IP Address 209.165.162.162 = GENERAL COMMUNICATION, INC., 2550 Denali Street, Suite 1000, Anchorage, AK 99503, US

From: =?ISO-8859-1?B?QWxsaWVkIElyaXNoIEJhbms=?=<win@aib.ie>
To: ******.*********@******.***
Subject: =?ISO-8859-1?B?V2luIDEgb2YgNSCAMTAsMDAwIGNoZXF1ZXMh?=
Date: 13 Sep 2009 21:40:08 -0700
Return-Path: win@aib.ie


Dear Customer,

AIB is launching a Customer Satisfaction Program so we can improve our products and services.
You have been selected to take part in our prize winning contest.
All you have to do is take your time to fill in the survey we will be sending you by mail after you enroll online by completing the form attached to this e-mail. In return, we will be sending you a €100 cheque - The guaranteed prize.
Join today for your chance to win one of the following prizes:

1 of 5 €10,000 cheques

1 of 20 €1000 gift vouchers

1 of 10 LG 42" Plasma TV - valued at €1300

1 of 10 Canon Digital SLR camera - valued at €1000


The enrollment form is attached to this email. Please download the attachment, open it and follow the instructions on your screen.


--------------------------------------------------------------------------------

Our Terms and Conditions and Privacy Statement apply to your use of this website. AIB and AIB Group are registered business names of Allied Irish Banks p.l.c. Registered Office: Bankcentre, Ballsbridge, Dublin 4.

Registered in Ireland : Registered No. 24173.Allied Irish Banks, p.l.c. is regulated by the Financial Regulator. Copyright Allied Irish Banks p.l.c. 1995

The attachment is an HTML file, which asks for account details and a whole series of 100 "Code Card" numbers. The scam has been notified to Allied Irish Bank security.

txtual
09-16-2009, 10:28 AM
I've received the very same message? and I have never even used online banking!

Miyuki
09-16-2009, 12:50 PM
Return-Path: <win@aib.ie>
Received: from 174.129.176.103, USA server, Amazon.com, Inc. [ec2-abuse@amazon.com] From: <win@aib.ie>
Subject: Win 1 of 5 €10,000 cheques!
Date: 15 Sep 2009
Return-Path: [win@aib.ie]
Message contains attachments
1 File (59KB)

* AIB_CSP_Enrollment.htmlAIB_CSP_Enrollment.html

Compact Headers
Dear Customer,

AIB is launching a Customer Satisfaction Program so we can improve our products and services. You have been selected to take part in our prize winning contest. All you have to do is take your time to fill in the survey we will be sending you by mail after you enroll online by completing the form attached to this e-mail. In return, we will also be sending you a €100 cheque - The guaranteed prize. Join today for your chance to win one of the following prizes:

* 1 of 5 €10,000 cheques
* 1 of 20 €1000 gift vouchers
* 1 of 10 LG 42" Plasma TV - valued at €1300
* 1 of 10 Canon Digital SLR camera - valued at €1000

The enrollment form is attached to this email. Please download the attachment, open it and follow the instructions on your screen.

Our Terms and Conditions and Privacy Statement apply to your use of this website. AIB and AIB Group are registered business names of Allied Irish Banks p.l.c. Registered Office: Bankcentre, Ballsbridge, Dublin 4.

Registered in Ireland : Registered No. 24173.Allied Irish Banks, p.l.c. is regulated by the Financial Regulator. Copyright Allied Irish Banks p.l.c. 1995

Jinnosuke
07-03-2010, 08:08 AM
From Allied Irish Banks, p.l.c.
Return-Path: <security@aib.ie>
Received: from 69.53.118.90, America server, Birch Telecom, Inc. , [abuse@birch.net]
From: "Allied Irish Banks, p.l.c."<security@aib.ie>
Subject: Code Card Alert!
Date: Tue, 29 Jun 2010
Message contains attachments
1 File (198b)

* AIB_Code_Card_Update_Form.html AIB_Code_Card_Update_Form.html

Compact Headers

Dear Customer,

Your AIB Code Card is about to expire.

You are kindly advised to follow the instructions below:

The update form is attached to this email. Please download the attachment, open it, and follow the instructions on your screen.

The data submitted will be transmitted over an SSL encrypted connection (128 bit Secure Socket Layer)

Dusty
09-22-2010, 03:43 PM
Dear Member,

According to our Terms of Use you need to re-confirm your account details.
Your acount is currently limited for security reasons.
Please complete the attachment form
Thank you for the attention you have given in trying to resolve the limitation and issues on your account.



Copyright © 1999-2010 Allied Irish Banks. All rights reserved.

Allied Irish Banks

Dusty
09-23-2010, 12:12 PM
From: Allied Irish Banks <alb@aib.ie>

from aib.ie (72.17.202.50.nw.nuvox.net)
Hostname 72.17.202.50.nw.nuvox.net
ISP NuVox Communications, Inc.
Country United States

aib.ie
IP address 194.69.198.194
ISP Aib-net
Country Ireland

from scm.sconsulting.com.mx (static-ip-69-64-56-163.inaddr.intergenia.de)
IP address 85.25.0.17
Hostname static-ip-85-25-0-17.inaddr.intergenia.de
ISP intergenia AG
Country Germany



As part of our security measures, we regularly screen activity in the system.
We recently contacted you after noticing an issue on your account.
We requested information from you for the following reason:
We have observed activity in this account that is unusual or potentially high risk.

Case ID Number: AIB-571-827-953

Please download the form attached to this email and open it in a web browser.
Once opened, you will be provided with steps to restore your account access.
We appreciate your understanding as we work to ensure account safety.
Sincerely,
Allied Irish Banks Account Department. All rights reserved.

Dusty
09-28-2010, 09:25 AM
Thread moved to correct location in existing AIB thread. Garreg Ddu

Allied Irish Banks <alb@aib.ie>
--------------------------------------------------
Received: from aib.ie ([72.17.202.50]) by Windsor.royalmanorhealth.com
Host name 72.17.202.50.nw.nuvox.net
Country Maitland, Florida United States
-------------------------------------------------
aib.ie
IP address 194.69.198.194
Hostname Not available
ISP Aib-net
Country Dublin, Ireland
-------------------------------------------------
Windsor.royalmanorhealth.com
IP: 209.62.20.200
Houston Texas United States
ISP: THEPLANET.COM INTERNET SERVICES
-------------------------------------------------
Received: from Windsor.royalmanorhealth.com (216-82-214-96.static.grandenetworks.net [216.82.214.96])
IP Information - 216.82.214.96
Host name 216-82-214-96.static.grandenetworks.net
Country Hewitt Texas United States
--------------------------------------------------

As part of our security measures, we regularly screen activity in the system.
We recently contacted you after noticing an issue on your account.
We requested information from you for the following reason:
We have observed activity in this account that is unusual or potentially high risk.

Case ID Number: AIB-571-827-953

Please download the form attached to this email and open it in a web browser.
Once opened, you will be provided with steps to restore your account access.
We appreciate your understanding as we work to ensure account safety.
Sincerely,
Allied Irish Banks Account Department. All rights reserved.

Templar
09-28-2010, 09:36 AM
Nice. :D


canonical name mail.groupmelvindesign.com
addresses 209.62.20.200

Registrant:
Group Melvin Design, LLC
3 South Broad St.
Suite 3C
Woodbury, NJ 08096
US
Domain Name: GROUPMELVINDESIGN.COM
OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com