MALWARE ALERT! MWALWARE scam email from HSBC hsbcservces6@host61.registrar-servers.com www.hsbcservces.cf

DO NOT CLICK ON THE LINK IN THIS EMAIL!  This email IS NOT FROM HSBC BANK and the link DOES NOT TAKE YOU TO THE HSBC BANK WEBSITE!  The link takes you to http://hsbcservces.cf/clientsdata/Policy.doc.exe which is an executable program that contains MALWARE which can infect your computer and/or device!  If you have clicked or downloaded this file, run a full virus scan as soon as possible.  You can download free versions from safe websites such as https://www.malwarebytes.org/ and http://free.avg.com/us-en/homepage

Originating IP: 129.56.97.25
Originating ISP: As-natcom
City: Abuja
Country of Origin: Nigeria

from: Hsbc <hsbcservces6@host61.registrar-servers.com> via hsbcservces.cf 
reply-to: Hsbc <admin@hsbcservces.ml>
to: 
date: Mar 1, 2019, 1:31 AM
subject: Hsbc
mailed-by: hsbcservces.ml
signed-by: hsbcservces.cf

HSBC

Dear Client OF HSBC Bank,

A sudden change has been noticed on your “secure key app”
it is Advised that you review immediately,We do advise you to proceed to confimation on customer data using the referral button.

Please Do Note This Instruction Has Been Sent Also To Customers Of Similar Issue And You Are Advised To Review Immediately
Failure To So Permits Account Suspension

www.hsbc.com

From the .html of the email:
Failure To So Permits Account Suspension

www.hsbc.com ( http://hsbcservces.cf/clientsdata/Policy.doc.exe )

( http://hsbcservces.cf/clientsdata/Policy.doc.exe )
<a href=”http://hsbcservces.cf/q/index.php?option=com_acymailing&no_html=1&ctrl=url&urlid=1&mailid=9&subid=3703″>www.hsbc.com</a>
<p>&nbsp;</p>
<a href=”http://hsbcservces.cf/q/index.php?option=com_acymailing&no_html=1&ctrl=url&urlid=1&mailid=9&subid=3703″ target=”empty”><input type=”button”
value=”REFERRAL” /></a></blockquote><img alt=”” src=”http://hsbcservces.cf/q/index.php?option=com_acymailing&ctrl=stats&mailid=9&subid=3703&no_html=1″
 border=”0″  height=”1″  width=”50″ />

No comments:

Post a Comment