I got that message in my hotmail inbox today.
I had a user receive this "CitiBank" email a few weeks ago -
http://pics.bbzzdd.com/users/viedit/citybank.jpg
The body of the message is a jpg. A view of the sourec revealed this -
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><map name="FPMap0"><area coords="0,0,610,395" shape ="RECT" href="
http://%36%34%2E%31%36%33%2E%31%39%30%2E%31%35%34:%34%39%30%33/%63%69%74/%69%6E%64%65%78%2E%68%74%6D"></map>
<META content="MSHTML 6.00.2800.1106" name=GENERATOR></HEAD>
<BODY dir=ltr>
<DIV>Josh,</DIV>
<DIV>I got this message, do you know if this is legitimate?</DIV>
<DIV>Diane</DIV>
<DIV>&nbsp;</DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV><FONT size=2>-----Original Message----- <BR><B>From:</B> Citibank
[mailto:identdep_op431598206813787@citibank.com] <BR><B>Sent:</B> Sun 8/8/2004
2:01 AM <BR><B>To:</B> Diane Fountain <BR><B>Cc:</B> <BR><B>Subject:</B>
CitiBank: please confirm your information [Sun, 08 Aug 2004 05:04:15
-0200]<BR><BR></FONT></DIV>
<P><FONT face=Arial><A
href="https://web.da-us.citibank.com/signin/scripts/login/user_setup.jsp"><IMG
src="algaecide.GIF?Security=2" useMap=#FPMap0 border=0></A></A></FONT></P>
<P><FONT color=#fffff1>
What number? Samsung .Let's come back Real Audio New
Year Texas Saturday The most ???? I must be off in 1895 Pokemon Black and
White a collect call I'd ruther not... The Census Jennifer Lopez I enjoy it...
Computers Texas Saturday Paint Shop Costumes Prom Dresses Guns Hewlett Packard
Nascar </FONT></P></BLOCKQUOTE></BODY></HTML>