Hacked HSBC Account
Discussion
Has anyone else had this in the last few days?
On Friday I logged on to my on line banking, both personal and business accounts with the same bank.
My personal account was ok but my business log on proses went a different way to normal. The screen message was along the lines that ‘ due to recent phishing attempts, my computer will have to be checked before I can access my account.
This wasn’t normal so I tried to cancel the log in. Message on the screen told me to call an 0800 number.
I went on line to do a quick check and found hsbc numbers nearly all start with 0845.
My phone rang, it was hsbc telling me they had locked my account due to an attack and that I should run a virus program, then get back in touch to go through changing my details, and to down load their rapport program.
I tried mailwarebtes, Kaspersky TDSKiller and Microsoft security essentials, nothing found.
Contacted bank again and told them I had found nothing.
Somehow, we still went through the security changes with raport being run at the same time which found something and apparently got rid of it, or at least to the best of my (limited) knowledge had.
I carried out my payments and transfers and logged off.
Back home that evening I tried to log on to hsbc again and got this message,
“Another computer on this network has the same ip address as this computer.
Contact your network administer for help resolving this issue.
More details are available in the windows system event log.”
So I didn’t go any further except to view non security associated sites to try and to find any details on this message.
This morning I’ve logged on to find over £2000 has gone!
I’ve spoken to the bank who’ve said its my computer that has a virus that sends me to another site when I try business, but not personal banking.
I thought it might have been them that’s hacked as personal is ok, though to be honest I don’t really know.
This is all I know about the hackers details,
06 Jul 2012 DR 44713J8017FL
GBD06072HDH89D8G
PAYMENT CHARGE 17.00
06 Jul 2012 DR 44713J8017FL
GBD06072HDH89D8G
MR GARTH SORRELL 1997.48
So, anyone got a good recommendation for some anti- virus programs?
Should I turn off and step away from the computer until I’ve got someone who knows what they’re doing?
On Friday I logged on to my on line banking, both personal and business accounts with the same bank.
My personal account was ok but my business log on proses went a different way to normal. The screen message was along the lines that ‘ due to recent phishing attempts, my computer will have to be checked before I can access my account.
This wasn’t normal so I tried to cancel the log in. Message on the screen told me to call an 0800 number.
I went on line to do a quick check and found hsbc numbers nearly all start with 0845.
My phone rang, it was hsbc telling me they had locked my account due to an attack and that I should run a virus program, then get back in touch to go through changing my details, and to down load their rapport program.
I tried mailwarebtes, Kaspersky TDSKiller and Microsoft security essentials, nothing found.
Contacted bank again and told them I had found nothing.
Somehow, we still went through the security changes with raport being run at the same time which found something and apparently got rid of it, or at least to the best of my (limited) knowledge had.
I carried out my payments and transfers and logged off.
Back home that evening I tried to log on to hsbc again and got this message,
“Another computer on this network has the same ip address as this computer.
Contact your network administer for help resolving this issue.
More details are available in the windows system event log.”
So I didn’t go any further except to view non security associated sites to try and to find any details on this message.
This morning I’ve logged on to find over £2000 has gone!
I’ve spoken to the bank who’ve said its my computer that has a virus that sends me to another site when I try business, but not personal banking.
I thought it might have been them that’s hacked as personal is ok, though to be honest I don’t really know.
This is all I know about the hackers details,
06 Jul 2012 DR 44713J8017FL
GBD06072HDH89D8G
PAYMENT CHARGE 17.00
06 Jul 2012 DR 44713J8017FL
GBD06072HDH89D8G
MR GARTH SORRELL 1997.48
So, anyone got a good recommendation for some anti- virus programs?
Should I turn off and step away from the computer until I’ve got someone who knows what they’re doing?
Thanks for the replys.
I am now on another computer. I've ran Microsoft security full scan after doing an up date, there was a new one today.
It found a nastie.. expoit:java/eve-2012-1723.a
I cannot copy the full log but its saying i can go inline to find more details.
Should i do this or leave it to my computer man this evening?
Re the secure key, hsbc said they noticed my ip address 'jumped' once logged in so they froze the account. I can only assume that i was not understanding them in regards to my security scans not finding them, and so logged into my account once they gave me the all clear.
The scammer must of then used the same key code?
I am now on another computer. I've ran Microsoft security full scan after doing an up date, there was a new one today.
It found a nastie.. expoit:java/eve-2012-1723.a
I cannot copy the full log but its saying i can go inline to find more details.
Should i do this or leave it to my computer man this evening?
Re the secure key, hsbc said they noticed my ip address 'jumped' once logged in so they froze the account. I can only assume that i was not understanding them in regards to my security scans not finding them, and so logged into my account once they gave me the all clear.
The scammer must of then used the same key code?
From that code, I would assume something used an exploit in Java to automatically install some software on your PC, which has let another person access your PC remotely. Once this happens, and you log into HSBC, the person can submit other requests to HSBC on your behalf.
Is this with business banking? The personal banking requires you to use the keyfob to set up new payees, but the business banking does not.
TBH, given the stress and hassle of removing everything competently from Windows, and the fact you do your banking on it, I would strongly advise you to reinstall Windows.
Is this with business banking? The personal banking requires you to use the keyfob to set up new payees, but the business banking does not.
TBH, given the stress and hassle of removing everything competently from Windows, and the fact you do your banking on it, I would strongly advise you to reinstall Windows.
CVE said:
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
When you reinstall Windows, make sure you stay on top of updates. Java SE 7 v5 has been out for 3 weeks and is "Critical". But, like me, you probably just clicked the "Yeah whatever" button when Java told you it had an update. I've just updated mine !!Edited by essayer on Monday 9th July 12:41
My account was hacked into a few weeks ago, thankfully the bank (clydesdale) did'nt process the transcations. I was taken to a dummy screen when i logged onto my online account and they got my details that way, very clever.
The Clydesdale told me to download Trusteer Rapport which cleaned the system and fully protects it, I was told that all banks are using and promoting this.
The Clydesdale told me to download Trusteer Rapport which cleaned the system and fully protects it, I was told that all banks are using and promoting this.
garos said:
My account was hacked into a few weeks ago, thankfully the bank (clydesdale) did'nt process the transcations. I was taken to a dummy screen when i logged onto my online account and they got my details that way, very clever.
The Clydesdale told me to download Trusteer Rapport which cleaned the system and fully protects it, I was told that all banks are using and promoting this.
I was told this morning by HSBC that Trusteer Rapport is only a spam type filter and not protective in any way.The Clydesdale told me to download Trusteer Rapport which cleaned the system and fully protects it, I was told that all banks are using and promoting this.
All I understand now is that the address bar at the very top left of the screen lights up green if it’s the real site.
He was quiet insistent about this as i had just suggested it was there site under attack as i also logged into my personal account at the same time with no dodgy withdrawals.
Just been to the bank and withdrew most of my cash just in case.
pc.iow said:
So, anyone got a good recommendation for some anti- virus programs?
Should I turn off and step away from the computer until I’ve got someone who knows what they’re doing?
OMFG! You run a PC with no AV?Should I turn off and step away from the computer until I’ve got someone who knows what they’re doing?
If you're not good with computers then I would simply do a reinstall but backup your personal files first. Once reinstalled then install a AV product, then install all the MS updates. Or you can pay someone who knows what they're doing to get rid of the virus.
Edited by Sir Bagalot on Monday 9th July 17:23
If you search for the benefiary's name, you get this:
http://www.myspace.com/directory/people/garth-sorr...
Which links to this
http://www.myspace.com/380940807
He also has a twitter page (the username is similar so I assume it's the same person).
http://twitter.com/devonse3
I suggest you let him have the money as he sounds like he is powerfully built.
http://www.myspace.com/directory/people/garth-sorr...
Which links to this
http://www.myspace.com/380940807
He also has a twitter page (the username is similar so I assume it's the same person).
http://twitter.com/devonse3
I suggest you let him have the money as he sounds like he is powerfully built.
this has happened twice in the last few months with my joint HSBC account. The last time, someone managed to get through security on the phone and transferred funds from our account to his!! mental....HSBC could not advise how he gor through security.
The time before someone hacked the account and nicked loads of cash.
thankfully HSBC gave us the money back very promptly.
The time before someone hacked the account and nicked loads of cash.
thankfully HSBC gave us the money back very promptly.
Sir Bagalot said:
OMFG! You run a PC with no AV?
If you're not good with computers then I would simply do a reinstall but backup your personal files first. Once reinstalled then install a AV product, then install all the MS updates. Or you can pay someone who knows what they're doing to get rid of the virus.
No Sir, i dont run a PC without AV. If you're not good with computers then I would simply do a reinstall but backup your personal files first. Once reinstalled then install a AV product, then install all the MS updates. Or you can pay someone who knows what they're doing to get rid of the virus.
Edited by Sir Bagalot on Monday 9th July 17:23
Maybe the scammer has blocked my post above where i say i've ran Kaspersky, Mailwear and Microsoft.
purplepolarbear said:
If you search for the benefiary's name, you get this:
http://www.myspace.com/directory/people/garth-sorr...
Which links to this
http://www.myspace.com/380940807
He also has a twitter page (the username is similar so I assume it's the same person).
http://twitter.com/devonse3
I suggest you let him have the money as he sounds like he is powerfully built.
Wow! Thankyou PPB.http://www.myspace.com/directory/people/garth-sorr...
Which links to this
http://www.myspace.com/380940807
He also has a twitter page (the username is similar so I assume it's the same person).
http://twitter.com/devonse3
I suggest you let him have the money as he sounds like he is powerfully built.
Should i give these details to the bank or would they already know?
How big would you say he was?
The person named is unlikely to have been behind it. The real scammers recruit a person to receive payments and forward it to them. They are usually advertised as "Work at home as an agent for a worldwide company - you simply receive payments and forward them to us, keeping 10% for your time". The person gets all this money and thinks they are onto an easy job, until the police come knocking. They usually escape without punishment (but not their 10%) because they are usually merely stupid rather than criminal.
edit: Ask the bank whether you need to report it as a crime. I recall that in recent years the police and banks have agreed there where the account holder hasn't lost money (ie. it was refunded by the bank) the banks will collate and report it as necessary, since they will be able to match victims to criminals far more easily.
edit: Ask the bank whether you need to report it as a crime. I recall that in recent years the police and banks have agreed there where the account holder hasn't lost money (ie. it was refunded by the bank) the banks will collate and report it as necessary, since they will be able to match victims to criminals far more easily.
Edited by Gareth79 on Tuesday 10th July 00:51
pc.iow said:
No Sir, i dont run a PC without AV.
Maybe the scammer has blocked my post above where i say i've ran Kaspersky, Mailwear and Microsoft.
OK so you've run these products (possibly after you've discovered the money loss) but which AV product do you use day in day out? And how is it updated?Maybe the scammer has blocked my post above where i say i've ran Kaspersky, Mailwear and Microsoft.
S6PNJ said:
OK so you've run these products (possibly after you've discovered the money loss) but which AV product do you use day in day out? And how is it updated?
Microsoft security essentials and Mailware are running all the time and Kaspersky gets used every day.I check for updates everyday as well.
Before the money was taken, but knowing I had been hacked, I ran these programs over and over with nothing being found.
That’s when I contacted the bank again and told them I could not find the virus. I logged on and ran Trusteer thinking it was an anti virus program while on the phone to them and it found something which I thought was then deleted.
We changed my security details and ended the phone call. I carried out my transfers, then logged out. This is where I think I must have been sent to a false page saying I was logged out, this is where they took over and sent the payments.
I have the laptop being worked on now as even though MS security essentials is saying I’m clear after yesterdays jarva related update, I still am not sure.
Until I know my laptop is clean I wont be going onto internet banking to change details again.
pc.iow said:
Microsoft security essentials and Mailware are running all the time and Kaspersky gets used every day.
I check for updates everyday as well.
Before the money was taken, but knowing I had been hacked, I ran these programs over and over with nothing being found.
That’s when I contacted the bank again and told them I could not find the virus. I logged on and ran Trusteer thinking it was an anti virus program while on the phone to them and it found something which I thought was then deleted.
We changed my security details and ended the phone call. I carried out my transfers, then logged out. This is where I think I must have been sent to a false page saying I was logged out, this is where they took over and sent the payments.
I have the laptop being worked on now as even though MS security essentials is saying I’m clear after yesterdays jarva related update, I still am not sure.
Until I know my laptop is clean I wont be going onto internet banking to change details again.
Quite similar, the hackers got through my kaspersky anti virus 6.0 (always running), this did not detect the virus at all it was only after downloading trusteer rapport that the virus was found, with rapport running you should be fine. I check for updates everyday as well.
Before the money was taken, but knowing I had been hacked, I ran these programs over and over with nothing being found.
That’s when I contacted the bank again and told them I could not find the virus. I logged on and ran Trusteer thinking it was an anti virus program while on the phone to them and it found something which I thought was then deleted.
We changed my security details and ended the phone call. I carried out my transfers, then logged out. This is where I think I must have been sent to a false page saying I was logged out, this is where they took over and sent the payments.
I have the laptop being worked on now as even though MS security essentials is saying I’m clear after yesterdays jarva related update, I still am not sure.
Until I know my laptop is clean I wont be going onto internet banking to change details again.
garos said:
Quite similar, the hackers got through my kaspersky anti virus 6.0 (always running), this did not detect the virus at all it was only after downloading trusteer rapport that the virus was found, with rapport running you should be fine.
As far as I know from my telephone conversation yesterday with HSBC, rapport will only show you that you’re logged onto the real site by way of the top left address bar being green in colour, not grey.I had trusteer running on Friday when my money was taken. I was logged into the genuine HSBC site.
They are saying the virus is in my laptop that allows someone to view everything I am doing.
I’m only guessing how they get the money without the code from the fob.
Gassing Station | Finance | Top of Page | What's New | My Stuff