Sunday, November 18, 2018

Welcome To Bank Of America Headquarters.

Welcome To Bank Of America Headquarters.

You total SCAM VICTIMS COMPENSATION FUNDS is waiting to be credited to you account for online
banking transfer as soon as we hear back from you with you contact
details, You cell phone is needed, funds amount: $486.8Million.

Thanks,
E-mail:bankoffamerica21@gmail.com
Contact:+1(202) 844-0779
Brian T. Moynihan
CHAIRMAN BANK OF AMERICA HEADQUARTERS

Email analysis :

NOTE : FBI.@topaz.ocn.ne.jp
NOTE : bankoffamerica21@gmail.com
NOTE : X-Originating-Ip : ⁨[197.210.47.224]⁩


NOTE : Received : ⁨from mzcstore251.ocn.ad.jp
NOTE : (mz-fcb251p.ocn.ad.jp [180.8.112.228])

Friday, September 29, 2017

Respectfully! (BANK OF AMERICA Scam)

Attn: Beneficiary,

I humbly wish to inform you that the Department of Credit & Telex control of the BANK OF AMERICA has received an instruction Order to effect the wire transferring of your approved fund of USD$17,500,000.00 MILLION to you immediately. I therefore request you to urgently re-confirm the HSBC Bank A/C. number stated below as your receiving Bank information, since this account was submitted by your lawyer Barrister Godson Gabriel of (GODSON & CO. LAW CHAMBERS) for the payment without any delay.

Note: In a case where you think you are not familiar with the bellow banking information as presented by your legal representative and agent, we advise you send to us now without any delay your detail in full containing your Banking information and other personal information so we don’t transfer to wrong account.

Bank: HSBC HONGKONG BRANCH
Address: Paterson Street, HSBC Premier Centre Shops
G03-04.G/F Hang Lung Centre 2-20
Paterson Street Cause way Bay, Hong Kong
Account number: 627 826464-001
Account name: Bob Andria
SWIFT code: HSBCKHKHH

However, it is our principle to initiate direct contact with the beneficiary of fund before final crediting of such fund. Therefore, I am personally contacting you directly in order to seek your approval to remit into the above account. In the meantime, the process of programming and registering of your transfer payment status code that will enable a hitch free wire transferring of your fund into your account within 72hours is in progress and I will be willing to assist you believing that you will in turn show some appreciation to me. Note, I can successfully achieve this transfer within the shortest time from now if only you can offer.

Get back to me quickly.
Respectfully!

MR.GREGORY ALLAN.
ACCOUNTANT, BANK OF AMERICA
EMAIL:gregoryallan088@yahoo. com

Email analysis :

NOTE : gregoryallan088@yahoo.com
NOTE : "WWW."@bronze.ocn.ne.jp
NOTE : Received : from User (p1060067-ipngn10501hodogaya.kanagawa.ocn.ne.jp
NOTE : [114.162.120.67])

Saturday, September 9, 2017

Bank of America Corporate Office Headquarters

Bank of America Corporate Office Headquarters
100 N.Tryon St Charlotte,NC 28255
Our Ref:BOA/IRU/SFE/15.5/WD/011
United States of America
Monday-Friday
8 a.m.-9 p.m. Eastern Daylight Time(EDT)
Saturday and Sunday
8 a.m.-4 p.m. Eastern Daylight Time(EDT)

The Management of the Bank of America Corporate Office Headquarters here in 100 N.Tryon St Charlotte,NC 28255 wishes to inform you that after a brief meeting held by the Bank executives yesterday,We deem it appropriate to intimate you that your funds will be transferred into the United States Treasury Account with the JP Morgan Chase Headquarters at 270 Park Avenue in New York according to the record we got due to your inability to complete the transaction and your failure to meet up with a minor payment obligation.The actual transfer of your funds($20,500,000.00) into the government account comes up next week.

This is in line with the instructions of the USA Treasurer,Mrs.Rosa Gumataotao Rios that all unclaimed funds be paid into the United States Government Treasury Account as unserviceable funds in compliance to section 3 subsection 1(a) of the United States Financial Law enacted in 2001 after an attack on our dear country on September 11,2001.

Find below the profile of the banking institution where your funds will be transferred into following the government directive:, And note to responds to us with below Email ( officemails@hot.ee ) Name of Bank: JP Morgan Chase Headquarters at 270 Park Avenue in New York. JP Morgan Chase Official Bankers for the United States Treasury Department

AC NO: 68302345093
Routing NO:JPM109593
Account Name: United States Treasury Department,USA

Note that if you still wish to receive your actual donation payment ( $20,500,000.00) do get back to us Immediately so that we will remove your funds transfer from the list of those transactions to be seized by the United States Government. Also be Informed that we need only a DIPLOMATIC IMMUNITY SEAL OF TRANSFER (DIST DOCUMENT) to complete the wire transfer direct to your personal bank account if you agree.The fee to obtain the SEAL was reduced from $600 to $296 and no other fee is involved.

You are required to send the fee of $296 by WESTERN UNION or Walmart to walmart to the issuing officer at the bank where your transaction originated as stated below INFORMATION.

If we receive the MTCN today along with your bank details,we will transfer your funds ( $20,500,000.00 ) before we close office and the funds will reflect 3hours after the transfer.We will send you all the transfer documents to enable you start making cash withdrawals from your account same day the funds are transferred. We have waited for so long and we cannot continue to wait.

Thank you for giving us the opportunity to serve your banking needs.

Yours faithfully,

Brian Moynihan
Chairman of the Board, Chief Executive Officer
Bank of America® Corporation head Office
Email ( officemails@hot.ee )
Corporate Office Headquarters,Charlotte,N.C.
Bank of America, N.A. Member FDIC.
© 2011 Bank of America Corporation. All rights reserved.

Email analysis :

NOTE : officemails@hot.ee
NOTE : invector@anagg.com
NOTE : emails@hot.ee
NOTE : Received : (from tomorevo@localhost)
NOTE : by www1032.sakura.ne.jp
NOTE : client-ip=219.94.129.42;

Thursday, November 17, 2016

ACCESS YOUR FUND URGENT NOW !!! (BOA Phishing)

Good Day..

Please my Dear we are sorry for our delaying so far!!, you can now access your compensation of $10.5 million U.S Dollar which has been credited on online account, it was registered with your Email, so log in to access the fund online now, with your Email and its password to clarify that this Email that is used to set up your online bank account is still active and to help us verify the real beneficiary,for easy access to your fund online , click here Online Fund Status to start the process, remember you can only log in with your email address and its password because it was registered with your email, for recognition of the real beneficiary of the fund, Note; even if it the site doesn't log you in at the first attempt try continuously okay, it will log you in to access your fund online and get back to me once you transfer total amount into your Bank account thanks..

Thanks
God bless!

Online Fund Status

Await your reply
Mrs Sandra Sandra


Email analysis :

NOTE : customer.rbos@gmail.com
NOTE : < bergenoid@gmail.com >
NOTE : Mime-Version : 1.0
NOTE : Content-Type : multipart/alternative;
NOTE : ACCESS YOUR FUND URGENT NOW !!!

Phishing analysis :

CLICK : Online Fund Status
OPEN : http://bit.ly/2fp5j9R
REDIRECT : http://deregulatedfxsolous.top/ZW50OiAiXGUwNTEiOw0KfQ0KLmljb24tZ2xvYmFsOmJlZm9yZSB7DQoJY29udGVudDogI/
SCREENSHOT :
CLICK : Login Now!
RESULT : ERROR MESSAGE.

Wednesday, August 17, 2016

FINAL PAYMENT NOTIFICATION ON YOUR APPROVED FUND

(INTERNATIONAL FUNDS TRANSFER / AUDIT UNIT)
UNITED NATIONS ORGANIZATION
(BANK OF ENGLAND ASSISTED PROGRAMMED)
DIRECTORATE OF INTERNATIONAL PAYMENT AND
TRANSFERS.870 UNITED NATIONS PLAZA 20-LONDON 10017.

ATTN :BENEFICIARY

I saw your email ( and I found out that you have not received your payment due to your lack of co-operation and not fulfilling the obligations giving to you in respect to your contract /inheritance payment. Secondly.Your email appeared among the beneficiaries,who will receive their -payment of your contractual sum and has been approved already for months. You are requested to get back to me for more directions and instructions on how to receive your fund. However, we received an email from one Mrs ROSE WILLIAM who told us that he is your next of kin. she has also submitted to us her international passport, and that you instructed her to come for the claim of your funds in the tune of 10.5 Million Pounds.we want to hear from you before we can deliver the funds to her.we want to confirm if you instructed her to make a change of ownership,thereby providing us with this information to deliver the funds to her.she has also submitted us her below home and banking information.

BANK OF AMERICA
MY ACCOUNT NO.46301-0188-048399-8
Mrs ROSE WILLIAM
Tel. 1-772 778 6138
Fax. 1-772 778 6091
Address : 2001 58th Avenue, Fl. 32966

Once again, I apologize to you on behalf of SECRETARY UNITED NATIONS,for failure to pay your funds in time, which according to records in the system had been long overdue.Please reconfirm to me immediately if you have authorized for the transferring of your fund to Mrs ROSE WILLIAM, Did you authorize Mrs ROSE WILLIAM to come for your claim?

MR. BAN KI-MOON,
SECRETARY UNITED NATIONS,

Email analysis :

NOTE : bankimoon@unitednations.org
NOTE : Received : from 202.171.149.185.static.zoot.jp
NOTE : (HELO mail.sns.tomio-nara.info) (202.171.149.185)

Saturday, April 2, 2016

Telegraphic Wire Transfer Payment from Bank of America United States.

Bank of America
150 Broadway Ave
New York, NY 10038 Usa.
Telegraphic Wire Transfer Payment from Bank of America United States.

This is an official notice from the Bank of America in regards to the transfer of your inheritance/ lottery funds worth $10.5 million united states dollars. Meanwhile we are very sorry for the delay in this transaction which was as a result of the latter we received from one Mr.David Carter We wish to notify you that a Man named Mr.David Carter sent a letter to our Bank here in the united states claiming that you are dead and he stated that before you died, you informed him about your funds worth $10.5 million which is in our bank here in the United States. Note that Mr.David Carter also sent a copy of your death certificate to us, to prove to us that you are dead as he claimed, but we did not believe him because we know that there are so many scam activities going on here in the united states. As a matter of fact, he also gave us every reason to believe that you are dead, and he is ready to take care of what ever it will cost to get your funds transferred into his own account,we decided to contact you first to be sure that you are dead as he claimed before releasing your funds worth $10.5 million to him. So are you dead or are you still alive? Be informed that we are going to release the funds to Mr.David Carter if you do not respond back to us within the next 2 working days. Please , kindly fill all the information below to enable us transfer your funds to your account before Mr David Carter will claim your funds.

Full Name:
Address:
Telephone:
Mobile:
Fax:
Email:

Bank Name:
Address:
Account No.:
Routing No.:
Swift Code:
Account Name:

However, we shall proceed to issue all payments details to the said Mr.David Carter if we do not hear from you within the next two working days from today.

I will be waiting for your urgent response.

Sincerely yours,

Mr. Brian t. Moynihan
Manager Bank of America

Email analysis :

NOTE : thomaskmont222@gmail.com
NOTE : Japanjpnch@themis.ocn.ne.jp
NOTE : Received : from User
NOTE : (p86094-ipngnfx01marunouchi.tokyo.ocn.ne.jp [153.142.238.94])

Monday, January 25, 2016

YOU'RE COMPENSATION FUND FROM BOA NY

Bank of America
Tower, New York, NY 10036, United States
From Desktop of Mr. Jeff Anderson
Our Ref: BOF-0XX2/987/20

Attn: Beneficiary

Please indicate if you have received your compensation funds sum of (U.S.D
$1.M Dollars).We have tried all our possible means to contact you since your
Name and email were stated on the manifest list submitted by the world
Bank external auditors but it failed and we want to know if you are still
Alive, so that we can finalized this transaction once and for all

Finally, you have the opportunity to enjoy positive New Year if you
Corporate and follow the official instructions mandated for the processing
Release of your fund worth One Million Dollars Only.

Be informed that you are not allowed to correspond with any person or office anymore,
You are required to send bellow Information for your transfer:

1) Your Full Name:
2) Your Full Address:
3) Your Contact Telephone and Fax No:
3) Your Profession, Age and Marital Status:
4) Any Valid Form of Your Identification/Driven License:
5) Bank Name:
6) Bank Address:
7) Account Name:
8) Account Number:
9) Swift Code:
10) Routing Number:

As soon as we receive the above mentioned information,
Your payment will be processed and released to you without any further delay

Yours Sincerely
Mr. Jeff Anderson
jeff_anderson38@aol.com
Bank of America Representative

Email analysis :

NOTE : jeff_anderson38@aol.com
NOTE : support@soderhamn.com
NOTE : X-Note : Sending IP is 81.94.92.233 ()

Wednesday, January 20, 2016

Bank of America Corporate Office Headquarters

Bank of America Corporate Office Headquarters
100 N.Tryon St Charlotte,NC 28255
Our Ref:BOA/IRU/SFE/15.5/WD/013
United States of America

Monday-Friday 8 a.m.-9 p.m. Eastern Daylight Time(EDT)
Saturday and Sunday 8 a.m.-4 p.m. Eastern Daylight Time(EDT)

Dear esteemed customer,CONTACT CUSTOMER CARE BY TEXT OR CALL,+1 240 7506 123

The Management of the Bank of America Corporate Office Headquarters here in 100 N.Tryon St Charlotte,NC 28255 wishes to inform you that after a brief meeting held by the Bank executives on,the 18th Day of jan 2016 at precisely 8 a.m. Eastern Daylight Time(EDT), we deem it appropriate to intimate you that your funds will be transferred into the United States Treasury Account with the JP Morgan Chase Headquarters at 270 Park Avenue in New York according to the record we
got from Africa due to your inability to complete the transaction and your failure to meet up with a minor payment obligation.The actual transfer of your funds($15,500,000.00) into the government account comes up next week. This is in line with the instructions of the USA Treasurer,Mrs.Rosa Gumataotao Rios that all unclaimed funds be paid into the United States Government Treasury Account as unserviceable funds in compliance to section 3 subsection 1(a) of the United States Financial Law enacted in 2001 after an attack on our dear country on September 11,2001. Find below the profile of the banking institution where your funds will be transferred into following the government directive:,

Name of Bank: JP Morgan Chase Headquarters at 270 Park Avenue in New York.
JP Morgan Chase Official Bankers for the United States Treasury Department
AC NO: 68302345093
Routing NO:021109593
Account Name:United States Treasury Department,USA

Note that if you still wish to receive your funds do get back to us immediately so that we will remove your funds transfer from the list of those transactions to be seized by the United States Government.Also be informed that we need only a DIPLOMATIC IMMUNITY SEAL OF TRANSFER(DIST) to complete the wire transfer.The fee to obtain the SEAL was reduced from $700 to $195 and no other fee is involved.You are required to send the fee of $195 by WESTERN UNION or MONEY GRAM to the issuing officer at the bank where your transaction originated as stated below:

INFORMATION

Receivers Name:.. NONSO ORJI
Country ...Benin Republic
City ....Cotonou
Test Question.... Be Rest
Answer ...Assure
AMOUNT to send:... $195
Sender's name:.......
MTCN or REFERENCE Number.......

If we receive the MTCN today,we will transfer your funds ($15,500,000.00) before we close office and the funds will reflect 3 hours after the transfer.We will send you all the transfer documents to enable you start making cash withdrawals from your account same day the funds are transferred.We have waited for so long and we cannot continue to wait.

Thank you for giving us the opportunity to serve your banking needs.

Yours faithfully,

Mr. Peter Gomez(CEO)
Bank of America®
+12407506123
Corporate Office Headquarters,Charlotte,N.C.
Bank of America, N.A. Member FDIC.
© 2011 Bank of America Corporation. All rights reserved.
AR72768/DD6A66

Email analysis :

NOTE : M.@arion.ocn.ne.jp
NOTE : peter.g32@hotmail.com
NOTE : X-Originating-Ip : [197.234.219.61]

Sunday, December 20, 2015

Wire Transfer of $50,500,000.00.

Dear Valued Customer,

Sir,

Re: Wire Transfer of $50,500,000.00.

Please be informed that a payment worth sum of (US$50,500,000.00) has been approved through Bank of America. We advise you send your full name, contact address, copy of your id and telephone number, to enable us process your payment.

Regards,

Mr. Chao Shu Chung
Account Department
Bank of America.
Utah - USA.

Email analysis :

NOTE : wire@boa-usa.com
NOTE : Received : from [204.151.8.137] (204.151.8.137)
NOTE : Return-Path : wxa034@nic11.0fees.us

Monday, November 9, 2015

YOUR PAYMENT OF $5, 000, 000 MILLION DOLLARS APPROVED

Bank of America Corporation
Fourth St.
333 S. Hope Ste. 100
Los Angeles, CA, 90071
Phones: (323) 364-4697 TEXT MESSAGE ONLY
Telephone: +1(323) 364-4697
Email: bankofamericaonlinetransfer1@gmail.com

YOU ARE HEREBY WARNED TO STOP ANY FURTHER COMMUNICATION WITH ANY BANK OR OFFICE REGARDING THIS FUND FOR SAFETY REASONS.OR YOU WILL BE AT RISK.(Be Warned) Attention: ONLINE ACCOUNT OPENING PAYMENT OF YOUR CONTRACT/INHERITANCE FUNDS.

From office of the Manager Director ONLINE ACCOUNT OPENING bank of america California (Mr Vincent North. ) This is to intimate and guide you, on the approval of your payment worth over Five Million United State Dollars (US$5.000,000.00) which was approved/released in your name here last week by the FOREIGN AFFAIRS department of bank of america.It is therefore our pleasure to letting you know that we have verified your contract/inheritance payment file and discovered that your file was long overdue for payment since, and the reason you have not received your payment, is because your file was dumped by one of our fiduciary agent in-charge of your file.And till date, you have not been able to receive your contract/inheritance payment.

To this end, all your efforts to secure the release of your fund failed. We therefore wish to advise that you stop any illegal transaction with any person(s) or office(s), regarding your contract/inheritance funds, as continuing with them, to claim your contract/inheritance funds will further frustrate and stop your payment claim.We have received an express mandate and instructions from the FEDERAL GOVERNMENT to commence the immediate release of your funds through our NEW ONLINE METHOD OF TRANSFER which will enable you to transfer your fund to any destination account of your choice.

Please reconfirm your information

1. Your full name.
2. Phone number.
3. Your Current Address.
4. Your age
5. Occupation
6. Attach a copy of your id Card for identification.

Regard
Mr Vincent North.
Director Bank Of America
Email: bankofamericaonlinetransfer1@gmail.com

Email analysis :

NOTE : Mr.Mike Don
NOTE : 157.55.234.246
NOTE : X-Originating-Ip : [105.112.22.106]
NOTE : bankofamericaonlinetransfer1@gmail.com

Friday, October 30, 2015

China Citic Bank

Fund Portfolio Department
Customer's Relations section, Asia Pacific.

Attention:Beneficiary,

We humbly received an instruction from our correspondence bank to transfer the sum of USD$8.500,000,00.Million into your account which we were on the process of seeking ways as to communicate you and get you informed about the new development so that you can officially transfer your fund via online into your designated bank account in your country by yourself to avoid any complication or further delay.

Surprisingly this day, we received an email from Mr. John Carter who claimed to be your representative forwarded the following account information to our office demanding us to transfer the fund into he's below account. Here are details of the bank account he forwarded to our office.

Bank of America(BOA)
301 S Kings Dr, Charlotte, NC 28204, United States
Mr. John Carter
Account# 004763124292
Routing # 064120351
P.O.Box 43,182 B Circle St.,
Herlong,CA 96113-0043 USA

Please let us know vividly as a matter of urgency if actually this man has your permission to receive your fund or on the contrary never your representative, you are officially requested to fill and send the under listed details correctly as soon as possible for verification purpose and for the immediate and speedy processing of your fund immediately

1. YOUR FULL NAME..........................
2. YOUR TELEPHONE......
3. FAX......................
4. AGE...........
5. SEX........................... .........
6. YOUR OCCUPATION.................... ............
7. YOUR ADDRESS....................... .
8. BANK DETAILS WERE YOUR FUND WILL BE TRANSFER INTO....

However, we shall proceed to issue all payment details to the said Mr.John Carter, If we do not hear from you within the next three working days from today. We Will process and release the fund into he's bank account accordingly.

Confirm your receipt of this mail without delay.....

Yours in service,

Mr. Benson Wills

Email analysis :

NOTE : martinlee_13@126.com
NOTE : bensonwills_citic@yeah.net
NOTE : Received : from unknown (HELO mailgateway.sdll.cn) (222.92.137.121)


NOTE : Received : from be.sdll.cn (unknown [10.12.12.89]) by mailgateway.sdll.cn (Postfix)
NOTE : Received : from User ([14.222.32.71]) by be.sdll.cn


NOTE : Fund Portfolio Department

Monday, August 31, 2015

Spam: Unusual Aсtіνitу : ***

Dear *** ,

Recently, there's been activity in your BankOfAmerica account that seems unusual compared to your normal account activities.

Please log in to your BankOfAmerica account to confirm your identity and update your information.

What's going on?

We're concerned that someone is using your BankOfAmerica account without your knowledge. Recent activity from your account seems to have occurred from a suspicious location or under circumstances that may be different than usual.

What to do:

Log in to your BankOfAmerica account as soon as possible.

We may ask you to confirm information you provided when you created your account to make sure you're the account holder.

Phishing analysis :

CLICK : Log in
OPEN : http://www.securityalertbofamofausa.com/page/boa/
SCREENSHOT :


Email analysis :

NOTE : admin@kyokuyo-ind.co.th
NOTE : Received : from mail.kyokuyo-ind.co.th ([202.57.154.98])
NOTE : Received : from BEABC ([122.128.109.50]) by mail.kyokuyo-ind.co.th

TELEGRAPHIC TRANSFER NOTICE

Attn: The Beneficiary

TELEGRAPHIC TRANSFER NOTICE.

We are hereby officially notify you concerning your fund telegraphic Transfer through our bank, Suntrust Bank, New York, to your bank account, which has been officially approved by the management of World Bank Swiss (WBS) to credit the sum of US$18.5 Million into your bank account.

Note that I have started processing your payment and every thing concerning the immediate remittance of your funds will be carried out within the shortest possible time from the time we received your? Below needed information.

Also be informed that the Governor of Bank in Cote D Ivoire (CI) will sign on your payment advice and a copy of the advice will be sent to the World Bank in Swiss for some record purposes. Meanwhile your information and your full contact details were received from our research manager, Barr.Paul Peterson on your behalf to FRB for immediate release of your fund.

This fund was part of usa lottery unclaim discovery fund with World Bank of Switzerland, which the Swiss Bank has decided to distribute it generously to help few lucky individuals and the American Government is in agreement with the Swiss Bank to distribute the fund to 700 hundred thousand people in America, Europe & Asia in other to help improve their businesses.

Therefore, reconfirm the aforesaid information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liable of any fund credited into an unknown account.

These are the information we needed to be reconfirmed by you.

1.Your Full Bank Account Details
2.Your Direct Cell or office phone to reach you
3.Your address of locations
4.Your full name

Finally, you are required to reconfirm directly to me the above information to enable me use it to process your bill of payment. Your quick response shall be mostly appreciated; all your response should be directed through our alternative email address for the immediate attention of the credit control department.

Yours Faithfully,
Dr.Fred Willison.
Vice Chairman, Director, Credit /Telex Department

Email analysis :

NOTE : xbankofamerican@gmail.com
NOTE : xxxbankofameric688@gmail.com
NOTE : marilobouabre20@yahoo.co.jp
NOTE : Received : from [41.189.47.193]


NOTE : by web101518.mail.kks.yahoo.co.jp
NOTE : X-Mailer : YahooMailWebService/0.8.111_67

Invoice Jeff Herman


invoice53444271 Jeff Herman.zip

File analysis :

OPEN : invoice53444271 Jeff Herman.zip
RESULT : File is a virus.

Virus analysis :

SHA256: 9c6ce032c5b4f521b0ace607a50a499812ecb9845741862a0f7f9183a87c7c49

ALYac : Trojan.Agent.BMBU
AVG : FakeAlert
AVware : Trojan.Win32.Generic!BT
Ad-Aware : Trojan.Agent.BMBU
Agnitum : Trojan.DL.Dofoil!MdY5QMP4IPM
Arcabit : Trojan.Agent.BMBU
Avast : Win32:Trojan-gen
Baidu-International : Trojan.Win32.Dofoil.bstr
BitDefender : Trojan.Agent.BMBU
CAT-QuickHeal : TrojanDownloader.Upatre.r4
Cyren : W32/Trojan3.RIE
ESET-NOD32 : a variant of Win32/Kryptik.DUYG
Emsisoft : Trojan.Agent.BMBU (B)
F-Prot : W32/Trojan3.RIE
F-Secure : Trojan.Agent.BMBU
Fortinet : W32/Kryptik.DUMX!tr
GData : Trojan.Agent.BMBU
Ikarus : Trojan-Downloader.Win32.Upatre
Jiangmin : TrojanDownloader.Dofoil.bhq
K7AntiVirus : Trojan ( 004cddfe1 )
K7GW : Trojan ( 004cddfe1 )
Kaspersky : Trojan-Downloader.Win32.Dofoil.bstr
Malwarebytes : Spyware.Dyre
McAfee : Upatre-FACE!67B2464F5D77
McAfee-GW-Edition : Upatre-FACE!67B2464F5D77
MicroWorld-eScan : Trojan.Agent.BMBU
Microsoft : TrojanDownloader:Win32/Upatre
NANO-Antivirus : Trojan.Win32.Dyre.dvrjgu
Panda : Trj/CI.A
Qihoo-360 : HEUR/QVM19.1.Malware.Gen
Sophos : Troj/Upatre-LD
TrendMicro : TROJ_UP.10D6D122
TrendMicro-HouseCall : TROJ_UP.10D6D122
VBA32 : Heur.Trojan.Hlux
VIPRE : Trojan.Win32.Generic!BT
ViRobot : Trojan.Win32.Upatre.43520.A[h]
Zillya : 'Downloader.UpatreGen.Win32.68
nProtect : Trojan.Agent.BMBU

Email analysis :

NOTE : bespalov@stati.orene.ru
NOTE : Received : by stati.orene.ru (Postfix, from userid 5001)
NOTE : 94.79.7.6 ()

Wednesday, August 12, 2015

Attn: Sir/Ma,

From US Ambassador to Federal Republic of Ghana
United States Consulate General Ghana
No 7 Mambilla Street ,Off Aso Drive
Maitama District Accra, Ghana.
E-Mail: unitedstateambassador5@gmail.com

Attn: Sir/Ma,

Unknown Claim Over Your Lottery Winning Fund Worth Of $1.5 Million

The Main truth about your Fund in Africa is that your email address won you the sum of $1.5 Million from LOTTERY COMPANY BRANCH IN AFRICA.,by a set-up program called ANNUAL WINNING ONLINE BALLOTING SYSTEM,This program called Annual Winning Online Balloting System is a program set-u p by the World Organization, and Financially supported by the World Organization including your Government as means to congratulate the Blessed Lucky winners of the year, so luckily to you, your email address was among the earlier emails that won this $1.5 Million each to all the emails owners and that is how you become a winner to this Winning Fund of $20 Million. While all the numerous emails and phone calls you have been receiving was from the old retired workers from Africa who are using their jobless/idleness to still fe es from you all because they kne w everything about your Lottery Fund when they where still in the Office, So that is why you haven't received any dime irrespective of
all your effort. When this issue was discovered, all Funds in Africa belonging to foreign Beneficiaries was directed up to this Embassy representing the West Africa Ghana. in NW Washington, DC 20008 USA, with purpose of transferring your Lottery Fund into your Bank Account. Although, We have received an instruction from the office of UNITED NATIONS POPULATION FUNDS ORGANIZATION under the West African Ministry ;Of Finance, few days from our correspondence to release your Overdue Compensate awarded payment fund valued sum of $1.5 million into your contract account, we are on the process to open an Domiciliary Bank Account in your name with the BANK OF CANADA and forward to you the account information so that you can access your fund in your account by yourself, But we are surprise this morning when we are about to open escrow account on your behalf, we received another email from Mrs. Mary Lynn Brown whom claim to be your CO USIN relative and also your representative&nb sp;with a letter of trust certificate telling us that she is your next of kin and you left an instruction to her for the claim of your (deposited fund $1.5 million). Here are the below account information she forwarded to us to transfer your fund into her account in USA.

The account which she forward to us as follow.

Bank of America
St. Petersburg, California USA
Bank Telephones: 1 877 984 7465 or 1 866 925 2036
Account Holder Name: Mrs. Mary Lynn Brown.
Customers Address: US Post Office: P.O Box 1956, San Ramona, Cal ifornia 98483
Account No: 9590078501567
Routing No: 031101169

Note: CHANGE OF OWNERSHIP CERTIFICATE has been made by the same person to transfer your $1.5 Million into the above information, Meanwhile if you are not in support of that, then respond quickly with reconfirmation to the bellow information's as we don't need any delay at all. Please, do reconfirm to us as a matter of urgency if this person is from you and has your authority to receive your fund. If this person is not your representative, you are requested to contact ;us without any delay and send this ;information as soon as possible, so that your fund value of $1.5 Million united state dollars will be released to you through bank telegraphic wire transfer method. Furnish your valid data to enable us verify your details. Your Full Name, Married/Single, Current Home Address, Your Telephone Number, Age and Sex, Occupation,Your Weekly / Monthly Income, Copy ID or International Passport for Identification. However, we shall proceed to issue all payment details to the said person explained above, if we do not hear from you within the next 4&nbs p;working days from today. Meanwhile i will want you to click this website to know more about me ( http://ghana.usembassy.gov/ambassador.html )

Yours Ambassador In Mission.
Head Of Mission: Ambassador Gene A. Cretz.
Ambassador Of Ghana in USA.

**Legal Disclaimer** This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. You must not keep, use, disclose, copy or distribute this email without the author’s prior permission. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Dar Al Fouad Hospital, 26 July St., The Touristic Zone ,6th of October City, Giza, 12568, Egypt (www.daralfouad.org)
_____________________________________________________________________

Email analysis :

NOTE : unitedstateambassador5@gmail.com
NOTE : nhosny@daralfouad.net
NOTE : Received : from mail.daralfouad.net
NOTE : (HELO daralfouad.net) (196.219.30.85)
NOTE : Received : from mail.daralfouad.net ([127.0.0.1])
NOTE : by mail.daralfouad.net
NOTE : Received : (from [127.0.0.1]) by mail.daralfouad.net

Wednesday, August 5, 2015

Bank of America Corporate Office

Bank of America Corporate Office
Headquarters 100 N.Tryon St Charlotte,NC 28255
Our Ref:BOA/IRU/SFE/15.5/WD/011
United States of America
Monday-Friday
8 a.m.-9 p.m. Eastern Daylight Time(EDT)
Saturday and Sunday
8 a.m.-4 p.m. Eastern Daylight Time(EDT)
Customer service: (+5858612253)

Dear esteemed customer,

The Management of the Bank of America Corporate Office Headquarters here in 100 N.Tryon St Charlotte,NC 28255 wishes to inform you that after a brief meeting held by the Bank executives yesterday,the 4 Day of August,2015 at precisely 8 a.m. Eastern Daylight Time(EDT), we deem it appropriate to intimate you that your funds will be transferred into the United States Treasury Account with the JP Morgan Chase Headquarters at 270 Park Avenue in New York according to the record we got from Africa due to your inability to complete the transaction and your failure to meet up with a minor payment obligation.The actual transfer of your funds($15,800,000.00) into the government account comes up next week. This is in line with the instructions of the USA Treasurer,Mrs.Rosa Gumataotao Rios that all unclaimed funds be paid into the United States Government Treasury Account as unserviceable funds in compliance to section 3 subsection 1(a) of the United States Financial Law enacted in 2001 after an attack on our dear country on September 11,2001. Find below the profile of the banking institution where your funds will be transferred into following the government directive:, And note to responds to us ASAP Name of Bank: JP Morgan Chase Headquarters at 270 Park Avenue in New York. JP Morgan Chase Official Bankers for the United States Treasury Department

AC NO: 68302345093
Routing NO:021109593
Account Name:United States Treasury Department,USA

Note that if you still wish to receive your funds do get back to us immediately so that we will remove your funds transfer from the list of those transactions to be seized by the United States Government.Also be informed that we need only a IMF IMMUNITY SEAL OF TRANSFER(IIST) to complete the wire transfer.The fee to obtain the SEAL was reduced from$2,600 to $150 and no other fee is involved. You are required to send the fee of $150 by WESTERN UNION or MONEY GRAM to the issuing officer at the bank where your transaction originated as stated below: INFORMATION

Receiver's Name.... JOHNSON EMMA
Country .......... BENIN REPUBLIC
City ....................... COTONOU
Text Question ........ WHEN
Text Answer ........ NOW
Amount..................$150
Sender's Name:-------------
MTCN or REFERENCE Number

The name of the city from where the money was sent If we receive the MTCN today,we will transfer your funds ($15,800,000.00) before we close office and the funds will reflect 3hours after the transfer.We will send you all the transfer documents to enable you start making cash withdrawals from your account same day the funds are transferred.We have waited for so long and we cannot continue to wait. Thank you for giving us the opportunity to serve your banking needs.

Yours faithfully,
Mr.Ben Shalom Bernanke
Bank of America®
Tele (+5858612253)
Corporate Office Headquarters,Charlotte,N.C.
Bank of America, N.A. Member FDIC.
© 2011 Bank of America Corporation. All rights reserved.
AR72768/DD6A66

Email analysis :

NOTE : federal.resrvebank_02corpateoff@yahoo.co.uk
NOTE : gtb.benin1@gmail.com
NOTE : Received : from [41.138.90.65]
NOTE : by web101917.mail.ssk.yahoo.co.jp via HTTP;

Monday, June 22, 2015

IMPORTANT PAYMENT WIRE NOTIFICATION VALUED $10.5M

BANK OF AMERICA
3181 Steinway St Astoria NY 11103
From the Desktop of
MR MOORE CARRICK
E-mail:moore.carrick3@aol.com
Date:06-20-2015

It is my modest obligation to write you this letter as regards the Authorization of your owed payment through our most respected financial institution (BANK OF AMERICA). I am MR MOORE CARRICK, the Chief Executive Officer, foreign operations Department BANK OF AMERICA, the British Government in Conjunction with us government, World Bank, united Nations Organization on foreign Payment matters has empowered my bank after much consultation and consideration to handle all foreign payments and release them to their appropriate beneficiaries with the help of a Representative from Federal Reserve Bank of New York. as the newly appointed/accredited international paying bank, we have been instructed by the world governing body together with the committee on international debt reconciliation department to release your overdue funds with immediate effect; with this exclusive vide transaction no.: wha/eur/202,password: 339331, pin code: 78569, having received these vital payment numbers, you are instantly qualified to receive and confirm your payment with us within the next 96hrs. Be informed that we have verified your payment file as directed to us and your name is next on the list of our outstanding fund beneficiaries to receive their payment. Be advised that because of too many funds beneficiaries, you are entitled to receive the sum of ($10.5M) only, as to enable us pay other eligible beneficiaries. To facilitate with the process of this transaction, please kindly re-confirm the following information below:

1) Your Full Name:
2) Your Full Address:
3) Your Contact Telephone and Fax No:
3) Your Profession, Age and Marital Status:
4) Any Valid Form of Your Identification/Driven License:
5) Bank Name:
6) Bank Address:
7) Account Name:
8) Account Number:
9) Swift Code:
10) Routing Number:

As soon as we receive the above mentioned information, your payment will be processed and released to you without any further delay. This notification email should be your confidential property to avoid impersonators claiming your fund. You are required to provide the above information for your transfer to take place through bank to bank transfer directly from BANK OF AMERICA.

We Look Forward To Serving You Better.

MR MOORE CARRICK
ACCOUNTANT, BANK OF AMERICA
(COPYRIGHT © 2015 BANK OF AMERICA)

Email analysis :

NOTE : moore.carrick3@aol.com
NOTE : info@bluenetech.net

Monday, June 1, 2015

BANK OF AMERICA NOTIFICATION OF TRANSFER (Mr.Alfred Macrea)

ATTENTION: Honorable Beneficiary

We have received this strictly payment information from United Nation Secretary M.Ban Ki Moon ,he instructed our bank to credit your compensation fund worth of US$10.500.000.00 Millions Dollars into any of your nominated bank account immediately. However, you shall require to reconfirm the followings data as below:

{1}. Your Full Name and Address................
{2}. Your Confidential Tel, Cell and Fax..........
{3). Your Bank name and address.:...............
{4). Your A/c Name and A/c Numbers............
(5). Your Swift Code / Routing Numbers............
(6) Your Occupation:.......................
(7)Your Driving license or passport copy

Please do provide the above information accurately, because this bank cannot afford to be held liable for any wrong transfer of funds or liability of funds credited into a ghost account. Take this importance notice that you are requested to send some little amount of money being Authorization of transfer processing Charge fee to enable us transfer your fund within 24 hours of working day. Bear in mind that all the legal necessary arrangement to release your fund has been finalized. We are only waiting for the Authorization processing charge fee to enable us credit your fund as quickly as possible. As a matter of urgent, you will see my working ID to know whom you are dealing with and we need also your proper clarification before the transaction can be effectively. Please, you should fill the Fund transfer form as below and select your modalities of payment without any delay.

Thanks for banking with Bank of America while we looking forward to serving you with the best of our service.

Yours in Service

Mr.Alfred Macrea

A/C DIRECTOR BANK OF AMERICA

EMAIL: bankof.americausa@ymail.com

Email analysis :

NOTE : alfredmacrea002@gmail.com
NOTE : inf@mail.ru
NOTE : Received : from User ([104.255.68.75])
NOTE : (user=recepcion@ceca.edu.mx mech=LOGIN bits=0) by mail.ceca.edu.mx

Monday, March 23, 2015

Do You Authorize Chan­ge of Beneficiary Account­?? (Bank Of America Scam)

Dear Beneficiary, In our office today was the presence of One Mr. John T. Pullen of 122 Fitch Way, Sacramento,CA.USA 95864, filing application contrary to your pending fund transfer. The above mentioned person visited this Bank yesterday with a power of attorney given in his favor by you, granting him the benefit to process and claim your inheritance of $2,500,000.00(Two Million, Five Hundred Thousand United States Dollars) for personal reasons. He further stated that the online account will be terminated while the fund should be wired to his bank immediately; Bank Name;Bank Of America, Account Number # 12908576457 Routing Number# 121000358. We ask Mr. John T. Pullen, to return back to the bank within 48 hours to enable us have a personal confirmation from you being hitherto the beneficiary. We are sorry to have delayed your instruction in giving out this fund since we must adhere to the Modus Operandi of this honorable bank by making sure this request is verified and confirmed by the beneficiary and his existing attorney. Your confirmation to the above will be appreciated. We look forward to hear from you soon. Reply to this email address; Email; standardchbankng100@pisem.net Dr. GM Gardner (A/G) Foreign Remittance Director Regards, Mr Eugene Gomi Manager,Standard Chartered Bank Victoria I/S Lagos.Tel:+2347016786464.

Email analysis :

NOTE : standardchbankng100@pisem.net
NOTE : bassnbaycharters@bassnbaycharters.com
NOTE : Received : from bassnbaycharters.com (67.212.225.148)
NOTE : Received : (from bassnbaycharters@localhost) by bassnbaycharters.com (8.13.1/8.13.1)
NOTE : X-Mailer : www.bassnbaycharters.com

FW: Important documents (Bank Of America Virus)

Cash Pro logo
Cash Pro logo
Important account documents

Reference: C85
Case number: 4690473

Please scan attached document and fax it to +1 (888) 589-3716.

Please note that the Terms and Conditions available below are the Bank's most recently issued versions. Please bear in mind that earlier versions of these Terms and Conditions may apply to your products, depending on when you signed up to the relevant product or when you were last advised of any changes to your Terms and Conditions. If you have any questions regarding which version of the Terms and Conditions apply to your products, please contact your Relationship Manager.

Yours faithfully

Signature Image

Rosalyn Chavez
Senior Manager
Bank of America Commercial Banking
Rosalyn.Chavez@bankofamerica.com

Calls may be monitored or recorded in case we need to check we have carried out your instructions correctly and to help improve our quality of service.

2014 Bank of America Corporation. All rights reserved. CashPro is a registered trademark of Bank of America Corporation.

AccountDocuments.zip

Email analysis :

NOTE : Rosalyn.Chavez@bankofamerica.com
NOTE : yvx@blaudieck.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
NOTE : Received : from unknown (HELO ACSKURDN) (83.231.81.43)


Virus analysis :

OPEN : AccountDocuments.zip
RESULT : AccountDocuments.zip is a VIRUS

ALYac : Trojan.GenericKD.2234787
AVG : Generic_s.ELW
AVware : Win32.Malware!Drop
Ad-Aware : Trojan.GenericKD.2234787
Antiy-AVL : Trojan[Downloader]/Win32.Upatre
Avast : Win32:Trojan-gen
Avira : TR/Crypt.Xpack.166918
Baidu-International : Trojan.Win32.Upatre.vlt
BitDefender : Trojan.GenericKD.2234787
CAT-QuickHeal : TrojanDownloader.Upatre.r4
ClamAV : Win.Trojan.Upatre-582
Comodo : TrojWare.Win32.UMal.~A
Cyren : W32/Trojan.ZDMF-2227
DrWeb : Trojan.DownLoad3.35985
ESET-NOD32 : Win32/TrojanDownloader.Waski.F
Emsisoft : Trojan.GenericKD.2234787 (B)
F-Secure : Trojan-Downloader:W32/Dalexis.B
Fortinet : W32/UPATRE.F!tr
GData : Trojan.GenericKD.2234787
Ikarus : Trojan-Downloader.Win32.Upatre
K7AntiVirus : Trojan ( 7000000c1 )
K7GW : Trojan ( 7000000c1 )
Kaspersky : Trojan-Downloader.Win32.Upatre.vlt
Malwarebytes : Trojan.Upatre
McAfee : Suspect-BW!0D6F95F76EEC
McAfee-GW-Edition : Suspect-BW!0D6F95F76EEC
MicroWorld-eScan : Trojan.GenericKD.2234787
Microsoft : TrojanDownloader:Win32/Upatre.AZ
NANO-Antivirus : Trojan.Win32.Upatre.dpimul
Norman : Upatre.FT
Panda : Trj/CI.A
Qihoo-360 : HEUR/QVM19.1.Malware.Gen
Sophos : Troj/Invo-Zip
Symantec : Downloader.Upatre
Tencent : Win32.Trojan-downloader.Upatre.Hfr
TrendMicro : TROJ_UPATRE.SMNC
TrendMicro-HouseCall : Suspicious_GEN.F47V0319
VIPRE : Win32.Malware!Drop
ViRobot : Trojan.Win32.A.Downloader.28928.D[h]
nProtect : Trojan.Upatre.Gen.2