sircles.net Computer Support The sircles IT blog | Re: Incoming Foreign Payment: Customer remittance

The sircles IT blog Internet Safety & Security, Windows Tweaks and Server Fixes

Re: Incoming Foreign Payment: Customer remittance

7. May 2020 09:35 by sircles in Online Fraud, SPAM, Phishing
Re: Incoming Foreign Payment: Customer remittance   This email has been seen doing the round th

Re: Incoming Foreign Payment: Customer remittance

 

This email has been seen doing the rounds this week:

 

 

From: Jeffery Cliff-HSBC [mailto:sales@cnseatechs.com]
Sent: 07 May 2020 03:34
To: Nick Foot
Subject: Re: Incoming Foreign Payment: Customer remittance

 

Greetings

 

At the request of our customer, We have arranged payment to your Bank account as provided by your customer to our bank.

 

Download the attached Bank payment Slip and confirmed that all details are correct.

 

VIEW / DOWNLOAD HERE    OR  CLICK HERE TO DOWNLOAD and enter the  PASSWORD   below 

 

The bank document contains sensitive information, Therefore, Kindly Download and use the PASSWORD:  HSBCREF#404929   to view the document .

 

We await your positive response.

 

Yours sincerely,

James Cliffe

 Head of Business Banking UK

 *******************************************************************************************************************************************

We're open every day from 8 am to 10 pm, subject to planned and emergency maintenance periods. If you're calling from outside the UK +44 179 249 6941. 

If you have a speech or hearing impairment, you can contact us on our textphone service 0345 712 5563; or +44 207 088 2077 if you're outside the UK.

*************************************************************************************************************************************************************************************

To help us improve our service, and in the interests of security, we may monitor and record your call.

Textphone :0800 028 3516 (+44 1792 494 394 from Overseas)  Our Ref: 1011276944

HSBC UK Bank plc

Registered Office: 1 Centenary Square, Birmingham B1 1HQ.

Registered in England - Number 9928412.

Authorized by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.

***************************************************************************************************************************************************************************************

 


The download is an exe file that originates here: https://ams3.digitaloceanspaces.com/paymentref00/PaymentRefM209388282.exe containing Trojan:Win32/Wacatac.C!ml which allows remote thieves to access your computer.

We have reported to digital ocean but they surely should be scanning uploads for something easily detected by Windows 10 Defender..?

 

Add comment