A right mishmash of an email with this HMRC tax phishing attempt.
The bots sending these are very confused this morning. The email subject says Tax Refund New Message Alert! but the body is all about an Icloud log in
The phishers really need to get their act together if they want to steal information or money with this one. However it is always the ones that we think won’t fool a 2 year old child that can barely read a few letters that seem to give the greatest return to the phishers
The email looks like:
From: HM & Customs <1Message@HMRC.gov.uk>
Date: Sun 06/03/2016 04:50
Subject: Tax Refund New Message Alert!
Your ID was used to sign in to App Store via a web browser.
Date and Time: March 04, 2016, 14:03 PM PDT
If you have not signed in to iCloud recently and believe someone may have accessed your account, you should verify your identity and change your password. Sign in to HMRC online Services
Hm & Customs respects your privacy.
The link behind the Sign in to leads to http://chefom.com/hmrc.gov.uk/8a9e617ee9a73ddf31d5b21bd3ef46ba/index.php Which is known by Internet Explorer Smart filter as well as Chrome and Firefox phishing filters and blocked. There no doubt will be other sites using the same email template that aren’t yet blocked
If you are unwise enough to follow the links and have anti-phishing or smart filter turned of, then you see a typical HMRC phishing page which looks very similar to a HMRC genuine page