The email below has a virus in the attachment.
Please do not open the attachment.
Delete the email immediately if you receive it.
X-SID-PRA: LLoyds Bank TSB <email@example.com>
Received: from 126.96.36.199.forward.012.net.il ([188.8.131.52] helo=User) by srv1a.iqmo.nl with esmtpa (Exim 4.72) (envelope-from <firstname.lastname@example.org>) id 1QeqF4-00045o-Q1; Thu, 07 Jul 2011 17:11:51 +0200
Originating IP = 184.108.40.206 = Golden Lines Cable, Tel Aviv, Israel
From: "LLoyds Bank TSB" <email@example.com>
Subject: Lloyds TSB Security Advisor ,
Date: Thu, 7 Jul 2011 18:10:04 +0300
Please note the header analysis reveals:
- The origin as Israel - Lloyds TSB is a UK Bank, why would it send an email from Isreal
- The item is sent via "Bcc:", not to your proper email address which would never be done by any bank
Dear valued customer , Any correspondence from a bank will always address you by name!
Due to concerns, for the safety and integrity of your
account , we have issued this warning message.
It has come to our attention that your account
information needs to be updated as part
of our continuing commitment to protect your account and
to reduce the instance of fraud on our website.
Please download the document attached to this
e-mail and update information.
Once you have updated your account records , your account
service will not be interrupted and will continue as normal.
LLoyds TSB UK Bank online
The attachment is called Lloyds TSB Login Form.html
The spelling, grammar and layout of the text are not as would be sent by a UK Bank
This is a Phishing scam, with a Viral payload.
It may be an attempt to infect your computer and make it part of a "NetBot" attack.