HSBC phishers disguise attacks as Wimbledon tickets prize

Filed Under: Phishing, Spam

With summer rapidly approaching (we hope..) in the UK, many people's thoughts are turning to strawberries, cream and action on the grass courts of SW19.

Yes, it's almost time for the Wimbledon tennis tournament!

Here's an email that we've seen spammed out to computer users, pretending to come from banking giant HSBC.

Wimbledon HSBC phishing email

The messages have a subject line of "Claim your ticket at Wimbledon" and have a file attached called prize-form.html.

Opening the file to unclock your prize, however, is not such a good idea as it contains a form which asks for all sorts of personal information about your bank account - including your date of birth, memorable names, card security code and so forth.

Phishing form

The scam earns some extra credibility because HSBC is a genuine sponsor of the Wimbledon tennis tournament, and there was indeed a competition held by the bank to meet Tim Henman.

Winners, however, were notified on 10 May 2011 according to HSBC's website - which is more evidence, if you needed it, that this email is a phishing scam designed to steal your credentials.

Don't allow the thought of free tennis tickets trick you into making bad security decisions. Always be suspicious of unsolicited emails from your online bank - especially if they ask for information like this.

, , ,

You might like

One Response to HSBC phishers disguise attacks as Wimbledon tickets prize

  1. Carl · 1217 days ago

    A real Bank promotion wouldnt have obvious miss spellings and grammar problems " the form need ( s ) to be opened"

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.