First published: 28th June 2016
A number of Hong Kong-based email addresses have received a fraudulent email purporting to be from the Hong Kong Companies Registry. The message says:
From: Hong Kong Companies Registry <crenq@cr.gov.hk>
Subject: e-Registry Docs
Reply-to: Hong Kong Companies Registry <crenq@cr.gov.hk>
Good day,
It is the good intention of The Government of the Hong Kong Special Administrative Region that you go through the attached document and give your suggestion on the issues as stated on the document, Click here to view.
You are required to go through the documents and also fill the 2016 support form.Please endeavor to return the form on or before 29th of June 2016.
Kind regards.
Companies Registry The Government of the Hong Kong Special Administrative Region Address:Information Counter at 14th Floor, Queensway Government Offices, 66 Queensway, Hong Kong Telephone:(852) 2234 9933 (852) 2867 2600/(852) 2867 2604 Fax: (852) 2596 0585 Email:crenq@cr.gov.hk Website:www.cr.gov.hk
The message contains a link to mypdfworkfiles.weebly.com, a website hosted in the USA that demands an email address, password, country and telephone number before refusing access to the documents.
This is a very basic phishing attempt, the email does not capture the tone of official announcements and there is no attempt to customise the landing page for the deception. However, it might easily fool a busy administrator.