Phishing: RBC Royal Bank

[kas]

phishing attempt email:

Subject: Account Validation
X-PHP-Originating-Script: 1002:wp-app.php
From: Rbc Online Banking <[e-mail]>
X-Originating-IP: [187.95.195.68]
Return-Path: <[e-mail]>

RBC Royal Bank

Dear RBC Customer's

You have received this email because we notice that someone had accessed or used your account for fraudulent activity from a different location.
For security purpose, we are required to open an investigation into this matter.

In order to safeguard your account, we require that you confirm your Rbc Account details.
To help us speed up this process, please access the following link so that we can complete the verification of
your Rbc Banking registration and information.

To get started, Kindly click on the link below:

www1.royalbank.com (link actually was http://www.thebesther.com//wp-content/uploads/optpress/images_optbuttons/jan.php)
Please Note:
If we do no receive the appropriate account verification within 48 hours, then we will assume your Rbc account is fraudulently used and will be suspended.

The purpose of this verification is to ensure that your Rbc account has not been fraudulently used and to fight against any fraudulent activities out of our bank.
Regards,

Royal Bank Of Canada - Technical security Department

Royal Bank of Canada Website, © 1995-2012

[kas]

Another scam email pretending to be from a bank:

Subject: Validate Your Account Information
From: rbc-royal-bank <[e-mail]>
Date: Thu, 13 Dec 2012 14:00:26 +0200
X-Originating-IP: [91.226.212.32]
Return-Path: <[e-mail]>

RBS Royalbank Logo

Dear American Express Client,

This is an automatic message by the system to let you know that you have to confirm your account information within 24 hours.
Your account has been frozen temporarily in order to protect it.

The account will continue to be frozen until it is approved And Validate Your Account Information.
Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again.

This will help protect you in the future. The process does not take more than 5 minutes.

To proceed to confirm your account information please click on the link below and follow the instructions that will be required.

Click Here To Verfiy Your Account info

We Are Here For You

© Royal Bank of Canada 1996-2012

Link is hxxp://bmi.mn/images/gallery/thumbs/rbs/confirm.php?action=billing_confirm=true&_session;2967399b9c3d3c22(a bunch more numbers which I assume gives them some info on who clicked?) and goes to a PHISHING site according to safeweb.norton.com/report/show?url=http%3A%2F%2Fbmi.mn%2Fimages%2Fgallery%2Fthumbs%2Frbs%2Fconfirm.php.