Reply from Virgin Money (who use ABSA's internet banking interface):
Anyone can fake a "from" address. I asked them if they even had a look at the url:
http://www.sadanet.or.id/ind/inter.php which is definately not legitimate. They simply styled their bogus form to look like that of ABSA's. They link directly to the images on ABSA's server e.g.
https://ib.absa.co.za/ib/images/logo.gif
I can't believe that is Virgin Money's reply.
Edit:
www.sadanet.or.id appears to be down and I just got an alert in Firefox warning me that the site has been reported as forgery.