Re: National Australia Bank

[wyvern]

It has been on the news the past couple of days about the NAB email 
being the latest 'bank' scam to be doing the rounds


Y

On 26/12/2005, at 1:39 PM, Mervyn & Giuliana Bond wrote:

I am being inundated with requests from National Australia Bank to 
contact them because they are doing software updates and want to know 
about my browser.

Has anyone else received these requests?  Are they genuine.
I dont bank with National.
Merv
--
"Science teaches that we must see in order to believe, but we must 
also believe in order to see."


-- The WA Macintosh User Group Mailing List --
Archives - 
Guidelines - 
Unsubscribe - 

WAMUG is powered by Stalker CommuniGatePro

Re: National Australia Bank

[tom hogarth]

Yes - NAB does warn about these, and tells you to
  ignore and do not respond to them at all, as
  no bank would send emails such as that anyway!

  Cheers, Tom


--- Rob Davies <[EMAIL PROTECTED]> wrote:
> 
> On 26/12/2005, at 1:39 PM, Mervyn & Giuliana Bond
> wrote:
> 
> > I am being inundated with requests from National
> Australia Bank to  
> > contact them because they are doing software
> updates and want to  
> > know about my browser.
> > Has anyone else received these requests?  Are they
> genuine.
> > I dont bank with National.
> > Merv
> > -- 
> > "Science teaches that we must see in order to
> believe, but we must  
> > also believe in order to see."
> 
> I do bank with the National and they do not contact
> clients via  
> email. They will send requests or information via
> their web-site  
> notice board, once you have logged into their online
> banking site you  
> have access to it.
> 
> It is a phishing email, simple way to deal with them
> is to mark as  
> SPAM and hopefully your email client or server will
> filter it  
> accordingly, preventing others to filter through.
> Also if you feel so  
> annoyed by such an email you can contact the bank
> via their addresses  
> on National Bank web site. Not much they can do
> about it except warn  
> customers.
> 
> Cheers!
> `Rob...
> 
> -- The WA Macintosh User Group Mailing List --
> Archives -
> 
> Guidelines -
>

> Unsubscribe -
> 
> 
> WAMUG is powered by Stalker CommuniGatePro
> 


Send instant messages to your online friends http://au.messenger.yahoo.com 

Re: National Australia Bank

[Rob Davies]

On 26/12/2005, at 1:39 PM, Mervyn & Giuliana Bond wrote:

I am being inundated with requests from National Australia Bank to  
contact them because they are doing software updates and want to  
know about my browser.

Has anyone else received these requests?  Are they genuine.
I dont bank with National.
Merv
--
"Science teaches that we must see in order to believe, but we must  
also believe in order to see."


I do bank with the National and they do not contact clients via  
email. They will send requests or information via their web-site  
notice board, once you have logged into their online banking site you  
have access to it.


It is a phishing email, simple way to deal with them is to mark as  
SPAM and hopefully your email client or server will filter it  
accordingly, preventing others to filter through. Also if you feel so  
annoyed by such an email you can contact the bank via their addresses  
on National Bank web site. Not much they can do about it except warn  
customers.


Cheers!
`Rob...

Re: National Australia Bank

[Mark Secker]

I guess what makes this different from most, older style, phish mails 
is that ... well the URL displayed is in fact for the real NAB 
website... (however it points to a invalid subdirectory link so 
typing it in manually gets you a dead link message from the real NAB 
web server)..



now

if you look carefully (ie you try copy and paste some text from the 
body of the message you notice that rather than text it is, in fact, 
an image of text.


in fact a GIF image. with a href which if you click on the actual 
image you get directed somewhere else (to the phishers server in 
Turkey)



Look you can open them and for, relatively,  some harmless fun you 
can type in any old fake details and guess what? it lets you in (but 
spits you out as soon as they think they have the details they want). 
if it's the kind of trivial pointless revenge  thing that warms the 
cockles of your black heart you could probably  quite easily write a 
script that fills in their form  hundreds of thousands of times with 
random and fake "NAB client" details and then spend the next month 
chuckling to yourself that, maybe, just maybe, all their on line 
orders of laptops   get rejected.



Mark Secker wrote:
I've literally had hundreds of them coming via  dozens dead or 
dormant e-mail accounts of forwards that I have.


never ever EVER EVER open ANYTHING like this EVER EVER even if it's 
from your own IT department


Further more  I have NEVER EVER seen a legitimate e-mail of this 
type. if they are legitimate they will tell you to ring their 
service center. and even then you look that up in the white/yellow 
pages rather than use any phone number they give you


A legitimate bank email will never ask you for your PIN number, net 
banking details, etc - if it does, it's a scam, and should be 
reported to the bank.


You should never follow a link in a message that appears to come 
from a bank (or, really, anybody else for anything important for 
security). Instead, use a bookmark or type in the address you know 
they have. For similar reasons, if they provide a phone number to 
call or address to send something to, do not use it - look up the 
bank's details in the phone book instead.


It is extremely important to understand that an e-mail can appear to 
come from any address of the sender's choice. If I can have your 
permission I'll demonstrate this shortly by sending a message to the 
WAMUG list that appears to come from you. Because sender addresses 
are so trivially faked, you can not trust that a message is from the 
person it appears to be from, and should generally be suspicious of 
any message, no matter who it's from, that asks for security 
details, personal details, or asks you to take actions like open an 
attachment, visit a website, or perform tasks on your computer.


Sucks, doesn't it?

--
Craig Ringer

Re: National Australia Bank

[Craig Ringer]

Mark Secker wrote:
I've literally had hundreds of them coming via  dozens dead or dormant 
e-mail accounts of forwards that I have.


never ever EVER EVER open ANYTHING like this EVER EVER even if it's from 
your own IT department


Further more  I have NEVER EVER seen a legitimate e-mail of this type. 
if they are legitimate they will tell you to ring their service center. 
and even then you look that up in the white/yellow pages rather than use 
any phone number they give you


A legitimate bank email will never ask you for your PIN number, net 
banking details, etc - if it does, it's a scam, and should be reported 
to the bank.


You should never follow a link in a message that appears to come from a 
bank (or, really, anybody else for anything important for security). 
Instead, use a bookmark or type in the address you know they have. For 
similar reasons, if they provide a phone number to call or address to 
send something to, do not use it - look up the bank's details in the 
phone book instead.


It is extremely important to understand that an e-mail can appear to 
come from any address of the sender's choice. If I can have your 
permission I'll demonstrate this shortly by sending a message to the 
WAMUG list that appears to come from you. Because sender addresses are 
so trivially faked, you can not trust that a message is from the person 
it appears to be from, and should generally be suspicious of any 
message, no matter who it's from, that asks for security details, 
personal details, or asks you to take actions like open an attachment, 
visit a website, or perform tasks on your computer.


Sucks, doesn't it?

--
Craig Ringer

Re: National Australia Bank

[Peter Sealy]

I also bank with NAB and have not received any such request. Funnily  
enough a few weeks ago I received an email from them, their On Line  
Trading arm actually, advising me of a new features. Altho they did  
not ask for any of my details I contacted them and asked if they had  
actually sent the email.


.

Peter Sealy
Thurgoona AUSTRALIA

Re: National Australia Bank

[Mark Secker]

I've literally had hundreds of them coming via  dozens dead or 
dormant e-mail accounts of forwards that I have.


never ever EVER EVER open ANYTHING like this EVER EVER even if it's 
from your own IT department


Further more  I have NEVER EVER seen a legitimate e-mail of this 
type. if they are legitimate they will tell you to ring their service 
center. and even then you look that up in the white/yellow pages 
rather than use any phone number they give you


given that with this phishing trip the imagemap href  link resolves 
to a (Win XP pro)  server registered  to someone called "Rock" in 
Turkey I think we can say 110% this is the "phish of the day"



Mervyn & Giuliana Bond wrote:

I am being inundated with requests from National Australia Bank to 
contact them because they are doing software updates and want to 
know about my browser.

Has anyone else received these requests?  Are they genuine.
I dont bank with National.
Merv


We bank with National and we have seen nothing of this.
A scam most likely or phishing as it is othewise known.
If you respond to it you just might start getting spam for all sorts 
of rubbish.


Good luck
Paul

-- The WA Macintosh User Group Mailing List --
Archives - 
Guidelines - 
Unsubscribe - 

WAMUG is powered by Stalker CommuniGatePro

Re: National Australia Bank

[Paul]

Mervyn & Giuliana Bond wrote:

I am being inundated with requests from National Australia Bank to 
contact them because they are doing software updates and want to know 
about my browser.

Has anyone else received these requests?  Are they genuine.
I dont bank with National.
Merv


We bank with National and we have seen nothing of this.
A scam most likely or phishing as it is othewise known.
If you respond to it you just might start getting spam for all sorts of 
rubbish.


Good luck
Paul

Re: National Australia Bank

[Robert Howells]

On 26/12/2005, at 1:39 PM, Mervyn & Giuliana Bond wrote:

I am being inundated with requests from National Australia Bank to 
contact them because they are doing software updates and want to know 
about my browser.

Has anyone else received these requests?  Are they genuine.
I dont bank with National.
Merv




Really you answer your own question.
If you don't bank with national they would have no reason to mail you,
and they would not be asking you those sort of questions if they did.

It's a scam trying to get you to click on the Url enclosed in the email
which would then require you to insert name and password 
to be SUCKED OFF for the scammers to use.

GOLDEN RULE  with Banks
Type in the URL address your self , or
	only ever use a Bookmark that you have created and kept in a secure 
folder.


Bob