HSBC phishers disguise attacks as Wimbledon tickets prize

Filed Under: Phishing, Spam

With summer rapidly approaching (we hope..) in the UK, many people's thoughts are turning to strawberries, cream and action on the grass courts of SW19.

Yes, it's almost time for the Wimbledon tennis tournament!

Here's an email that we've seen spammed out to computer users, pretending to come from banking giant HSBC.

Wimbledon HSBC phishing email

The messages have a subject line of "Claim your ticket at Wimbledon" and have a file attached called prize-form.html.

Opening the file to unclock your prize, however, is not such a good idea as it contains a form which asks for all sorts of personal information about your bank account - including your date of birth, memorable names, card security code and so forth.

Phishing form

The scam earns some extra credibility because HSBC is a genuine sponsor of the Wimbledon tennis tournament, and there was indeed a competition held by the bank to meet Tim Henman.

Winners, however, were notified on 10 May 2011 according to HSBC's website - which is more evidence, if you needed it, that this email is a phishing scam designed to steal your credentials.

Don't allow the thought of free tennis tickets trick you into making bad security decisions. Always be suspicious of unsolicited emails from your online bank - especially if they ask for information like this.

, , ,

One Response to HSBC phishers disguise attacks as Wimbledon tickets prize

  1. Carl says:

    A real Bank promotion wouldnt have obvious miss spellings and grammar problems " the form need ( s ) to be opened"

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <strike> <strong>

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.