Tuesday, January 6, 2015

PayPal Phishing

Dear PayPal Customer,

During your regular scheduled accounts maintenance verification procedure, We have detected a slight error regarding your PayPal Account This might be due to Unauthorization access to your PayPal Account...Please verify your information by Downloading the Attachment file and open in a browser to Continue. NOTE: At PayPal, your protection is our top priority and We're committed to keeping your PayPal accounts safe from unauthorized access. IMPORTANT: *If your PayPal information is not verified within 48 hours then your ability you access your PayPal account will be restricted.

Very sincerely,
PayPal Review Department

Copyright © 2015 PayPal, Inc. All rights reserved. PayPal is located at
2211 N. First St.,
San Jose, CA 95131.

Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click 'Contact Us' at the bottom of any page.

Phishing analysis :

Extract was removed from pastebin...

Email analysis :

NOTE : service@paypal.name
NOTE : X-Mailer-Sent-By : 1
NOTE : X-Mailer-Sid : 10
NOTE : Return-Path : bounce@anatrez.com
NOTE : X-Remote : 188.138.65.69 (static-ip-188-138-65-69.inaddr.ip-pool.com)
NOTE : Mime-Version : 1.0
NOTE : Content-Disposition : inline
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Message-Id : < *@anatrez.com >
NOTE : Received : from static-ip-188-138-65-69.inaddr.ip-pool.com (HELO anatrez.com) (188.138.65.69)
NOTE : Important: We noticed unusual activity in your PayPal account (Ref #PP-003-627-576-424)

SEEKING FOR INVESTMENT PARTNERSHIP WITH YOU!...........................................PLEASE GET BACK TO ME.

Sir,

The world statistics shows that the economy of your country is great and investment friendly.

I have a client that want to invest into REAL ESTATE OR INTO ANY PROFITABLE AND LUCRATIVE BUSINESS,and I want to know, if bylaw your country allow investor to come in,And if you can act the-funds manager.Your reply will be highly appreciated and every other details about the funds will be sent to you.You are advise to please reply to(willkbull@yandex.com)

Best regards.
Donald Charlie

Email analysis :

NOTE : mr.bensonjp@yahoo.com
NOTE : zuky45@online24.co.uk

Mr. JohnKelly

Dear Friend ,

We have concluded to effect your payment of $1.7Million, through western union, but the maximum amount you will be receiving each day starting from tomorrow is $4,500.00 daily until the funds is completely transferred.

Kindly Contact Western union Agent:
MR. BEN RICHARD
TEL: +22998359944
E-mail:wumt006@outlook.com

Also reconfirm your information to them below

YOUR NAME----------------------
YOUR ADDRESS-----------
YOUR PHONE-------------
OCCUPATION-----------------

Though, I sent $4,500.00 in your name today,but MR. BEN RICHARD said that you should contact first with your information. So contact MR. BEN RICHARD or you call him as soon as you receive this email and tell him to give you the MTCN, sender name and question/answer to pick the $4,500.00 Please let me know as soon as you received all your funds $1.7Million,

Thank you.
Mr. John Kelly

Libya Reconstruction contract bid

Salaam Alaykum,

The Libyan Prime minister has mandated all appointed ministers to take charge in fast reconstructing and re-building of Libya. His present finance minister has mandated me to seek for your confidential cooperation in the supply of various reconstructing equipment's and your products for the rebuilding of Libya.

A consideration also is that your quotation must be CIF Port of commericale GABES Tunisia; we choose this port as result of the present security situation in Libya. We are in need of products for all sectors of our economy. Please email me for more clarification if interested.

Best Regards,

Dr.Mohamed Abdelaziz, PHD
Director of the Minister's Office, Ministry of Finance Libya!
libyaministryoffinance@ovi.com
burak.burakotocom@dr.com

Email analysis :

NOTE : libyaministryoffinance@ovi.com
NOTE : User-Agent : Roundcube Webmail/1.0.1
NOTE : burak.burakotocom@dr.com
NOTE : Received : from unknown (HELO server.mscript.in) (91.148.168.150)
NOTE : Received : from localhost ([::1]:52081 helo=webmail.boostelectronics.com)
NOTE : by server.mscript.in
NOTE : (envelope-from )
NOTE : Libya Reconstruction contract bid

You can be his next of kin

Dear Good friend,

My name is Mr. Malik Fariz ,I worked as personal Attorney to late Mr. Zulfiqar Ahmed , an expatriate, who was a consultant with PETROLIAM NASIONAL BERHAD (PETRONAS) Malaysia. He died on April 21st, 2009. Since then I have made several inquiries as to locate any of his extended relatives, but all proved abortive.

After several unsuccessful attempts, hence I decided to contact you. I am contacting you to assist in retrieving the money valued at (US$15.5 Million ) that was left behind by my client (Mr. Zulfiqar Ahmed ) with the HSBC BANK BERHAD, Malaysia before it declared un-serviceable account and be confiscated by the bank. Consequently, the bank issued a notice to provide any member of late Zulfiqar Ahmed family or relatives within 10 days or the account will be closed.

I hereby seek your consent to act as relative to late Zulfiqar Ahmed and claim the money US$15. 5 Million from the bank. I will provide the necessary information to be used in convincing the bank that you relate to late Zulfiqar Ahmed . Whoever I present to the bank will claim the money, since I am his personal Counsel before he dies; the bank knows me, because I represent him in all his banking dealings with the bank.

When you claim the money, we share it 50% / 50%. All I require is your honest cooperation to enable us succeed
without any hitch. I guarantee that this will be executed under a legitimate arrangement that will protect us from any breach of the law.

I wait for your urgent reply, send your reply to my private email address fzmk65@outlook.com
l'm sending this mail with my office email address.

Sincerely,
Malik Fariz
fzmk65@outlook.com
robd@ebeships.com

URGENTLY AND EXTREMELY CONFIDENTIAL.

From Engr. Daniel Peters.
Chairman NNPC Contract Award Committee
Nigerian National Petroleum Corp
Falomo - Victoria Island Lagos.

Dear Friend,

URGENTLY AND EXTREMELY CONFIDENTIAL.

By introduction, I am Engr. Daniel Peters and the Chairman of the Tender Board Committee which awards contract in the Department of Petroleum Resources of Nigeria. I sent you email sometime ago informing you of our plan to transfer the sum of USD$8.6Million (Eight Million, Six Hundred Thousand US Dollars only) to your account, and have been waiting to hear from you ever since, but to no avail you hence this particular message by way of reminder.

I want you to know that these funds originated from an Over-invoiced contract sum which was awarded to a foreign firm in 2004. I and my other colleagues in the Tender Board purposely inflated the actual cost of the contract with the extra value of USD$8.6 Million. However, the original contractor has fully executed the contract, the project commissioned and the contractor paid his actual contract worth, leaving behind the over-invoiced sum which is US$8.6 Million. So, it is based on this that we now want you/your company to come forward to stand in and claim this sum on our behalf.

We are Civil Servants and by law, we are not allowed to operate foreign bank account while still in office, so you are to act as the one who had executed the contract worth the sum of USD$8.6 Million for my Department and you now want your payment settled. Remarkably, this deal is 100% risk free. We are perfectly in charge and had worked out modalities that would guarantee a hitch free transfer of this fund to your account fully free of any illegal act or encumbrances and are clean, clear and non-criminal origin. I will guide you on how to go about it and we shall claim the fund without any difficulty.

If you are interested in the proposal, and you are a trustworthy person who would not sit on this money if it is transferred into your account, kindly indicate by contacting me through my E-mail and you can as well send your bank account details for this transfer. Please note that this deal must be kept absolutely confidential till we have concluded it. We have also mapped out 35% of the total sum for you for your help and assistance while the remaining is for me and my colleagues.

NOTE again that upon completion of this transaction, whereas 35% is mapped out as your compensation for your involvement, we shall visit you immediately to collect and invest our shares in your country. Therefore, you will equally assist us to identify and advise us on any viable business which will have a good return on investment in your country. Please send your response through my private email address: engineer_danielpeters@yahoo.com for my urgent attention.

Thank you as I look forward to your anticipated co-operation.

Yours faithfully,

Engr. Daniel Peters.
Email: engineer_danielpeters@yahoo.com