http://www.gtbupdating.tk/ ?

Lol. If they send this link to 2 million people and they succeed in getting 2 people to input their details, they have made sales.

From: GeNS@gtbank.com
Subject: ACCOUNT SUSPENSION NOTICE




Dear Valued customer,

GUARANTY TRUST BANK CUSTOMER DATA UPDATE EXERCISE



As part of our continuous efforts towards providing you with excellent customer service and ensuring efficiency in
transaction processing, we request that you kindly update your records with the Bank by going to https://ebank.gtbank.com/ibank3/update/login.aspx
This update will help us to prevent any unauthorised or illegal use of our customers identity and to confirm that you are
truely the owner of the account you are operating. Failure to update your account now will lead to termination of your account and internet banking services for security reasons.
click here now for the update.
.
GTBank is committed to protect the identity of it's internet banking users.
Help us to serve you better. It's all about your security.

Thank you for choosing Guaranty Trust Bank Plc.





© 2011 Guaranty Trust Bank.

NOTE : THIS UPDATE MUST BE DONE IMMEDIATELY OR YOUR ACCOUNT WILL BE DISABLED

Complete with the GTB logo and all that there rotating stuffs. The catch is that - https://ebank.gtbank.com/ibank3/update/login.aspx and the update now link both link to the pirated gtb website. So if you dont look at link redirects, you don enter panpe be that o.

I would assume that the domain extension gives it away instantly

yawa-ti-de:

I would assume that the domain extension gives it away instantly 

Not to mummy and daddy.

Infact it will even add more authenticity to it when mummies and daddies see its not "ordinary" .com but something so "official" and "different" .tk.



Trader: Okoro my pikin please help me check my email

Okoro: Ok sir. . . papa GTBank don send you mail o

Trader (excited): Ehn, chai this people like oyibo things, wetin dem talk?

Okoro: They say you should update ya details in dia website.

Trader: Ha, open it na lets see the website.

Okoro: papa come type ya ID and pin

**trader reaches for file of papers to get that paper GTBank gave him containing the ID details,  dnt blame him, he has never had need for it before so its not in his head**

Trader: Oya my pikin see am, type am.

Okoro: papa e don enter. . . dem say i should press tonic. . . sorry token.

**trader reaches for the brand new token in the small white box, dnt blame him he never had a need for it in the past **

Trader: Oya okoro press am and ggive them the numbers. . .

Okoro: papa e don update finish!

Trader: Thank you my pikin.

There's a frame embedded on http://www.gtbupdating.tk/

The real phishing files are called from http://www.gtbanig.host.org

Reported to the datacenter. Let's see if they do anything.

This is serious mehn. . . . .