Date: Thu, 10 Oct 2013 11:57:31 +0300 [04:57:31 EDT]
From: Companies House [firstname.lastname@example.org]
Subject: Compulsory Companies House WebFiling Update #90721
Compulsory Companies House WebFiling Update #90721
This is an important notice to inform you as a registered company to update your details.
This will make it easier to update our database and keep records of our company.
Kindly follow the link below to update your information.
CLICK - Start Here
Cardiff CF14 3UZ
DX 33050 Cardiff
[phish]www.misspanama.net/respaldo/ukcompany/CompaniesHouse.htm which asks only for a Company Name, email address and password.
So, what is being harvested here? There seems to be no malware involved, so perhaps the bad guys are actually trying to hijack company identities for some evil purpose.
It turns out that Companies House have a webpage all about this type of threat and recommend that you forward offending emails to email@example.com. Just remember.. sometimes phishers are after something a lot less obvious than your bank details!