Re: Incoming Foreign Payment: Customer remittance

This email has been seen doing the rounds this week:

Greetings

At the request of our customer, We have arranged payment to your Bank account as provided by your customer to our bank.

Download the attached Bank payment Slip and confirmed that all details are correct.

VIEW / DOWNLOAD HERE  OR  CLICK HERE TO DOWNLOAD and enter the  PASSWORD   below 

The bank document contains sensitive information, Therefore, Kindly Download and use the PASSWORD:  HSBCREF#404929   to view the document .

We await your positive response.

Yours sincerely,

James Cliffe

Head of Business Banking UK

*****************************************************************************************

We're open every day from 8 am to 10 pm, subject to planned and emergency maintenance periods. If you're calling from outside the UK +44 179 249 6941. 

If you have a speech or hearing impairment, you can contact us on our textphone service 0345 712 5563; or +44 207 088 2077 if you're outside the UK.

*************************************************************************************************************************************************

To help us improve our service, and in the interests of security, we may monitor and record your call.

Textphone :0800 028 3516 (+44 1792 494 394 from Overseas)  Our Ref: 1011276944

HSBC UK Bank plc

Registered Office: 1 Centenary Square, Birmingham B1 1HQ.

Registered in England - Number 9928412.

Authorized by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.

The download is an exe file that originates here: https://ams3.digitaloceanspaces.com/ containing Trojan:Win32/Wacatac.C!ml which allows remote thieves to access your computer.

We have reported to digital ocean but they surely should be scanning uploads for something easily detected by Windows 10 Defender..?