HSBC - spam example


„You have a new e-Message from HSBC.co.uk. This e-mail has been sent to you to inform you that we were unable to process your most recent payment. Please check attached file for more detailed information on this transaction….“

You can judge from header that the sender IP is from Peru (190.81.193.83). The spamer not only copy the logo from HSBC, but cunningly change the envelope-from to @hsbc.co.uk, for the purpose of deceiving the receiver.

Following screenshot is the test result of the attachment from Virustotal. Your account information might be stolen, when you thoughtlessly open the suspicious attachment. We recommend that you install an anti-virus software and update it regularly with new versions from the Internet, which can reduce your risk of identity theft.