SWIFT and Western Union used as hook for spam with suspicious payload
Publication:
BIScom Subsection:
Thursday, 7 February, 2019 - 23:36
Similar e-mails are being distributed naming businesses that it is common for financial services businesses to deal with. SWIFT and Western Union are the bait for the unwary. HSBC in Dubai makes an appearance, too, to increase the credibility of the scheme.
The mails purportedly come from admin@vephota.tk and originates from 202.158.245.10 which is a permitted sender for that domain but reverse DNS lookup failed.
*UNAUTHORIZED SWIFT*
Dear Agent,
The attached swift has been placed on Hold.
Kindly verify receiver's details to release the transaction.
Note: Please do not hesitate to revert to us should you require any further information..
Respectfully,
Ahmed Hassan
Head of Treasury
HSBC BANK
HSBC Bank Middle East Limited UAE Branch,
P.O. Box 66, Dubai, UAE
Attachment UNAUTHORIZED SWIFT PDF ZIP
------------------
*WU COMPLIANCE MANUALS*
Dear Sub-Agent,
Find attached the Western Union Compliance Manuals.
Regards.
FRANKLIN 100 DVSD
Support Specialist
Western Union Financial Services, Inc.
P.O. Box 6036
Englewood, CO 80112
Phone: 1-800-725-600
Attachment: WU Compliance Manuals PDF zip
