# MA-081.092004: MyCERT Alert - The HSBC Bank Fraudulent Email

**Date:** 07 Sep 2004  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-081.092004  
**Advisory ID:** MA-081.092004

---

#### Regarding the above matter, MyCERT received a report receiving a suspicious email purportedly from the HSBC Bank Malaysia.
The email uses a fake and non-existence "from" information:
--------------------------------Example of the Phishing Email------------------------------
> From: HSBC Bank Malaysia
> Subject: Re: OfficiaI lnformation from HSBC Bank MaIaysia
>
> Dear valued HSBC Bank Malaysia Customer!
> As part of our continuing commitment to protect your account and to
> reduce the instance of fraud on our website, we are undertaking a
> period review of our member accounts. You are requested to visit our
> site by following the link given below. This is required for us to continue
> to offer you a safe and risk free environment to send and receive money online,
> and maintain the HSBC Bank Malaysia Experience. In success you will be redirected
> to the HSBC Bank Malaysia home page.
>
> Thank you.
> https://www.ebank.hsbc.com.my/jsp/en/Verify.jsp
-----------------------------------------------------------------------------------------------------------
MyCERT's analysis shows that once clicked to the above phishing site, users will be directed to a link which requests requests users to enter their username and password information. The link is as below:
> http://221.6.105.59/secure/hs-my/verify.php
Upon analysis by MyCERT, the above phishing site is located in China. MyCERT had verified with HSBC Bank Malaysia and according to them such email was not sent by them and they advise users to ignore any such emails. Such emails are being sent in order to gain access to your Internet Banking password, this can then be used to access your bank accounts for malicious purposes.
This method of gaining Internet Banking login and password for malicious purposes is also called the phishing scam. Such scams use decoy Web pages and spam messages to trick unsuspecting users into releasing sensitive information, such as logon and password information.
List of phishing scams involving other financial institutions around the world is available at:
> http://www.antiphishing.org/phishing\_archive.htm
MyCERT strongly urge users who receive emails purportedly from a bank requesting to change their logon and password should ignore/delete such emails immediately.Users are also advised to refer and verify any such emails with their ISPs, CERTs or with the Particular Financial Institutions mentioned in any of such emails.
MyCERT can be reached for assistance at:
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Email:
Tel: 03-89961901
Fax: 03-89960827
SMS: 019-2813801