HMRC Phishing site on .gov.uk!

[devolution]

I only just stumbled across this news item:

HMRC phishing site hosted on gov.uk domain - Netcraft

An ongoing phishing attack against UK taxpayers is being given additional credibility by using a gov.uk domain. Sefton Council is hosting the phishing content on its Novel GroupWise 7.0 site at web11.sefton.gov.uk.
The phish follows one of the typical ploys commonly seen in HMRC and IRS phishing attacks: The victim is led to believe that they can receive a tax refund by submitting their full credit card details, but these details are instead sent directly to the fraudster behind the attack.

Not that this is big news or anything, but the fact that a .gov.uk system got hacked and this site put up should ring some pretty big alarm bells!
Plus the average punter might think it genuine!

 

[crabfoot]

Definitely nasty ... worth bumping this up.