Scanned from HSBC_Payment  Multifunction Printer - Office 365 Phishing Spam !!!!

The sign in button actually links to: https://woohaa.io/wp-admin/moh/actions.php

 The email reads:

**PLEASE DO NOT REPLY TO THIS EMAIL**

This document was scanned and sent to you using a HSBC_Payment  Multifunction Printer
Recipient: [email protected] 

Total Pages: 1
Receive Time: 7:04:34 AM
Transmit Time: 0.014 sec

Document Name: HSBC_Payment_slip_for Outstanding 001005.pdf

Multifunction Device Location: Office
Device Name: HSBC Printer

For more information on HSBC products and solutions, please visit https://www.hsbc.com

Here is a reproduction of the attachment HSBC_Payment_slip_for Outstanding 001005l