by David Jansen
Thu Dec 03, 2009 3:52 pm
Another phishing attempt where the scammer tries to make the target believe there's something wrong and needs to take action. Don't click on that link as it can take you anywhere including the possibility of getting a trojan installed on your pc. Just delete these emails.
Irregular activity on your HSBC Check Card
From:
"HSBC Bank plc" <[email protected]> [Add]
To:
Date:
Wed, 2 Dec 2009 10:44 PM (21 hours 59 mins ago)
Return-Path: <[email protected]>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store66m.internal (Cyrus v2.3.15-fmsvn20771-f904b41c) with LMTPA;
Wed, 02 Dec 2009 16:44:22 -0500
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: html='Windows-1251'
X-Resolved-to: X-Delivered-to:
X-Mail-from: [email protected]
Received: from mx3.messagingengine.com ([10.202.2.202])
by compute2.internal (LMTPProxy); Wed, 02 Dec 2009 16:44:22 -0500
Received: from mail01.fit2001.com (unknown [219.94.133.112])
by mx3.messagingengine.com (Postfix) with SMTP id 76B2E17A
for <>; Wed, 2 Dec 2009 16:44:21 -0500 (EST)
Received: (qmail 30398 invoked from network); 3 Dec 2009 06:44:13 +0900
X-Authentication: grace was authenticated by 219.94.133.112
at 3 Dec 2009 06:44:13 +0900
Received: from unknown (HELO User) (212.175.158.32)
by 219.94.133.112 with SMTP; 3 Dec 2009 06:44:13 +0900
Reply-To: [email protected]
From: HSBC Bank plc<[email protected]>
Subject: Irregular activity on your HSBC Check Card
Date: Wed, 2 Dec 2009 13:44:22 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Truedomain-SPF: None
X-Truedomain-DKIM: None
X-Truedomain: Neutral
Message-ID: <[email protected]>
Dear HSBC Online Customer,
We detected irregular activity on your HSBC Check Card on 02 December, 2009.
As the Primary Contact, you must verify your account activity before you can continue using
your card, and upon verification, we will remove any restrictions placed on your account.
To review your account as soon as possible please click on the link below:
FastMail.FM WARNING: URL text and host don't match, possible phishing attempt. URL disabled. Original URL='http://220.225.200.66/Seminar/hsbc.co.uk/1/2/personals/ibanking/HSBCINTEGRATIONCAM10.jsessionid=02111iq7TJIkz8qsaX_Rti3w82412c58t1e1IDV_URL=hsbc.MyHSBC_pib.html'. Original text='http://www.hsbc.co.uk/1/2/HSBCINTEGRATION/CAM10;jsessionid=0000'. For more information on phishing click here.
Thank you for using HSBC Bank UK
We appreciate your business and the opportunity to serve you.
Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.
Being a victim doesn't mean you stand alone. We're here to help you.
