Monday 3 March 2008

HSBC | You are requested to update your account information

Quite a simple email this, working on the premise that the bank is supposed to have upgraded software so now needs a reminder of your details...

It's totally text, so no need for an image really. It is sent to 'undisclosed recipients' and uses a generic welcome - not a specific welcome (by name) that a bank really would use.

The target URL is http://www.ssachat.com/profiles/system/cache/images/hsbc/submit.php?cmd=login, which although not the sort of site I would visit myself (!!), it doesn't look connected to Phishing, so it's likely to be an unwitting victim itself.

A copy has been sent to phishing@hsbc.com. Here's the content:

Dear Sir/Madam,

HSBC Bank Plc is hereby announcing the New Security Upgrade. We've upgraded our new SSL servers to serve our customers for a better and secure banking service,against any fraudulent activities.

Due to this recent upgrade, you are requested to update your account information by clicking the link below.

https://Securityalert.HSBC.co.uk/1/2/

HSBC Bank Plc
Security Advisor
HSBC Bank PLC.

No comments: