Fake banks, couriers, law firms, escrow and other fake sites used in scams.
by NinjaDing Sat Nov 13, 2010 5:15 pm
Hi,
First time Iv'e posted on here so I hope I'm doing it correctly with the full headers.
I received the email below which is (I believe) a phishing email that leads you to reply with your details on a "Hsbc" web site. I don't bank with them. I have received a few emails like this recently from various "banks".

Many thanks
NinjaDing


Your account was accesed by a third party
Friday, 12 November, 2010 15:11
From HSBC Bank plc. Fri Nov 12 15:11:07 2010
X-Apparently-To: xxxxxmyemailaddressxxxxx via 87.248.114.63; Fri, 12 Nov 2010 15:11:53 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 198.252.182.37
Received-SPF: softfail (mta1009.bt.mail.ukl.yahoo.com: domain of transitioning [email protected] does not designate 198.252.182.37 as permitted sender)
X-YMailISG: .a0aHxIcZApT0vF1rJeH_wPZwnW9JetrUtE_kUt9EmgWlZsw XwTUfcW9yZjvntWGDLWn3d7F.hLwrfmOVAak_qSfEoCdR1IuXrEweukAy8Bx BuSgZ6g2esV6ucLelf_2dLItYn4yUHfLUg6PzP.gwyxRfGl3sduPkumOE5MZ 3R1Rc6rCFQncTo7uRoYo.Zdz.2b3I2W.4MvuvV7gLVJWouIQ03jQgJVVslpv vddcwIdBjgJaiOdJztoZrjJYPbEImfwad_i0imxD1cheicocCQcCWCSYNOVy NoHIxI90dHieiUn5YJa2391pvy_KP_7FhbsT4U4WzTK1f5oFZQeMCbADm_sM I1LddGDDw100BOZ6MZgWSv699zIo1j4gFtwjXG.pHpXep59IZwXWcCv.ignw QyY8ujwF2oLEan8Yc5PuGgX6bgDXzR9AwbcyLPrAxJHqtJxAJbUeP_nEnA4V LYBpkUWoS7HUMJ9ndNtXevjILg--
X-Originating-IP: [198.252.182.37
    ]
    Authentication-Results: mta1009.bt.mail.ukl.yahoo.com from=hsbc.co.uk; domainkeys=neutral (no sig); from=hsbc.co.uk; dkim=neutral (no sig)
    Received: from 198.252.182.37 (EHLO server02.mail.corenap.com) (198.252.182.37) by mta1009.bt.mail.ukl.yahoo.com with SMTP; Fri, 12 Nov 2010 15:11:53 +0000
    Received: from User (adsl-66-142-134-209.dsl.hstntx.swbell.net [66.142.134.209]) (authenticated bits=0) by server02.mail.corenap.com (8.14.4/8.12.10) with ESMTP id oACFBC82006855; Fri, 12 Nov 2010 09:11:12 -0600 (CST)
    Message-Id: <[email protected]>
    From:
    "HSBC Bank plc."<[email protected]>

    Subject: Your account was accesed by a third party
    Date: Fri, 12 Nov 2010 09:11:07 -0600
    MIME-Version: 1.0
    Content-Type: multipart/mixed; boundary="----=_NextPart_000_00DC_01C2AA85.5EE9092A"
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2800.1081
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
    Content-Length: 37440
    Message contains attachments
    1 File (27KB)

    * Verify.htmlVerify.html


    Dear Customer,

    We detected irregular activity on your HSBC
    Internet banking account on 12/11/2010.

    For your protection, you must verify this
    activity before you can continue using your
    account.

    Please download the document attached to this
    email to review your account activity.

    We will review the activity on your account
    with you and upon verification,

    and we will remove any restrictions placed on
    your account.


    If you choose to ignore our request, you leave us no choise
    but to temporaly suspend your account.

    We ask that you allow at least 72 hours for the case to be
    investigated and we strongly recommend to verefy (sic) your
    account in that time.

    Best Regards,
    Colette Nugent
    Head of Customer Communications

    © Copyright HSBC Holdings plc 2010 - All rights reserved
    Advertisement

    by Michael Sat Nov 13, 2010 5:32 pm
    Hi there, welcome to scamwarners :)

    You're correct that this doesn't belong to the legitimate bank. It could be that it is combined with a piece of malware as it's asking to download a document. The best course of action is to just delete the mail and forget all about it. Thanks for posting, and if you have any questions you know where to find us :D

    Account inactive - messages are not being monitored

    Who is online

    Users browsing this forum: ClaudeBot and 4 guests