Nismo
Member
Registered: 12th Sep 02
User status: Offline
|
Be aware of the spoof thats currently doing the email run
quote:
Dear valued HSBC Bank plc Customer!
As part of our continuing commitment to
protect your account and to reduce the instance
of fraud on our website, we are undertaking a
period review of our member accounts. You are
requested to visit our site by following the link
given below. This is required for us to continue
to offer you a safe and risk free environment to
send and receive money online, and maintain the
HSBC Bank plc Experience. In success you will be
redirected to the HSBC Bank home page. Thank you.
http://www.ukpersonal.hsbc.com/public/ukpersonal/internet_banking/en/logon.jhtml .
The link at the bottom (unsurprisingly) does not take you to the HSBC website. The e-mail comes from "HSBC Bank plc support@hsbc.co.uk " Please delete these messages when they arrive in our queues and warn customers that they should contact their bank if they are in any doubt. I am sure HSBC is well aware of these e-mails by now !
the above link in the email points you to- http://222.96.156.154/net/.o/hs/serv.html
which is the spoof website colelcting userdetails and then trasfering your money away.
|
Adam-CorsaC18s
Member
Registered: 7th Apr 03
Location: Royston, South Yorkshire
User status: Offline
|
cheers mate
...
|
Matt H
Member
Registered: 11th Sep 01
Location: South Yorkshire
User status: Offline
|
nice 1 bruvva
|
Pablo
Member
Registered: 3rd Feb 03
Location: Milton Keynes
User status: Offline
|
Thanks my friend 
|
Nismo
Member
Registered: 12th Sep 02
User status: Offline
|
have a look here at the spoofed site , its pretty good 
http://222.96.156.154/net/.o/hs/serv.html
|
Dean_H
Member
Registered: 19th May 02
Location: Rhondda Cynon Taff
User status: Offline
|
Once HSBC find out who done that website their fuked.....
|
lil miss kinky
Member
Registered: 16th Jun 04
Location: Sutton-on-Hull, Kingston upon Hull
User status: Offline
|
thanks 
|
TNM
Member
Registered: 5th Apr 04
Location: Nottingham Drives: VW Tiguan
User status: Offline
|
its been going on for months there is one for Natwest, Barclays, HSBC, Halifax, Lloyds TSB etc etc ive had loads at work.
|
Pablo
Member
Registered: 3rd Feb 03
Location: Milton Keynes
User status: Offline
|
Yeah Nemo, u didn't do a bad job 
|
Nismo
Member
Registered: 12th Sep 02
User status: Offline
|
quote:
Originally posted by P4UL
Yeah Nemo, u didn't do a bad job
yeah im currently typing this in florida , thanks guys couldnt of done it without you
|
Pablo
Member
Registered: 3rd Feb 03
Location: Milton Keynes
User status: Offline
|
|
--Dave--
Banned
Registered: 17th Feb 04
Location: Essssseeeeex Drives: Black Supra TT
User status: Offline
|
all you gotta make sure is that when you're typing in ANY bank details (logins, passwords etc etc) the URL address at the top of the page starts with "HTTPS".
I do the online stuff with Barclays and have had about 5 of these crappy things come through to my e-mail.
|
Ian
Site Administrator
Registered: 28th Aug 99
Location: Liverpool
User status: Offline
|
Making sure the address starts https:// isn't the complete solution, IE allowed you to put username and password on the URL like
https://username assword@www.site.com/
All you need it a username that looks like a bank web address ie.
https://hsbc.com:1234@213.44.2.5/path/path/whatever
and you're actually going to 213.44.2.5 not hsbc.com
Its so much of a problem Microsoft have actually removed the functionality from IE in latest updates.
Have a read of this - http://seclists.org/lists/webappsec/2004/Apr-Jun/0140.html
|
--Dave--
Banned
Registered: 17th Feb 04
Location: Essssseeeeex Drives: Black Supra TT
User status: Offline
|
very interesting! I was told the HTTPS thing by quite a few online shops that I deal with, thanks for the info Ian.
|
Greasemonkey
Member
Registered: 17th Apr 02
Location: Drives a Tractor
User status: Offline
|
|
SXI_SAM
Member
Registered: 16th Sep 05
Location: Burton-on-Trent, Staffs
User status: Offline
|
I work for HSBC and we never email customers!! So emails you do get its fraud!!!
|
Shelly
Premium Member
Registered: 15th Nov 00
Location: Lancashire Drives: Astra H VXR
User status: Offline
|
I get loads of emails from random banks asking me to log in and update my details. banks i've never even been with.
|
Aaron
Member
Registered: 9th Aug 04
Location: Cottingham, East Riding
User status: Offline
|
quote:
Originally posted by Shelly
I get loads of emails from random banks asking me to log in and update my details. banks i've never even been with.
They're scams.
|
Shane
Member
Registered: 10th Jan 04
User status: Offline
|
quote:
Originally posted by Corsa_Babe6
I work for HSBC and we never email customers!! So emails you do get its fraud!!!
grave digger
|
Matt L
Member
Registered: 17th Apr 06
User status: Offline
|
iv had ones from rbs and natwest sent to my works email and i dont use either of the banks
[Edited on 17-01-2008 by Matt L]
|
Shelly
Premium Member
Registered: 15th Nov 00
Location: Lancashire Drives: Astra H VXR
User status: Offline
|
quote:
Originally posted by Aaron
quote:
Originally posted by Shelly
I get loads of emails from random banks asking me to log in and update my details. banks i've never even been with.
They're scams.
I know, I just delete them anyway.
|
Nismo
Member
Registered: 12th Sep 02
User status: Offline
|
i posted shit like this, what a loooooser
|
Shelly
Premium Member
Registered: 15th Nov 00
Location: Lancashire Drives: Astra H VXR
User status: Offline
|
aww, I love you Nath!
|
Nismo
Member
Registered: 12th Sep 02
User status: Offline
|
|
Shelly
Premium Member
Registered: 15th Nov 00
Location: Lancashire Drives: Astra H VXR
User status: Offline
|
|
