Desperate phishing attempt against an online bank with a challenge-response authentication.