Monday, March 23, 2015

Do You Authorize Chan­ge of Beneficiary Account­?? (Bank Of America Scam)

Dear Beneficiary, In our office today was the presence of One Mr. John T. Pullen of 122 Fitch Way, Sacramento,CA.USA 95864, filing application contrary to your pending fund transfer. The above mentioned person visited this Bank yesterday with a power of attorney given in his favor by you, granting him the benefit to process and claim your inheritance of $2,500,000.00(Two Million, Five Hundred Thousand United States Dollars) for personal reasons. He further stated that the online account will be terminated while the fund should be wired to his bank immediately; Bank Name;Bank Of America, Account Number # 12908576457 Routing Number# 121000358. We ask Mr. John T. Pullen, to return back to the bank within 48 hours to enable us have a personal confirmation from you being hitherto the beneficiary. We are sorry to have delayed your instruction in giving out this fund since we must adhere to the Modus Operandi of this honorable bank by making sure this request is verified and confirmed by the beneficiary and his existing attorney. Your confirmation to the above will be appreciated. We look forward to hear from you soon. Reply to this email address; Email; standardchbankng100@pisem.net Dr. GM Gardner (A/G) Foreign Remittance Director Regards, Mr Eugene Gomi Manager,Standard Chartered Bank Victoria I/S Lagos.Tel:+2347016786464.

Email analysis :

NOTE : standardchbankng100@pisem.net
NOTE : bassnbaycharters@bassnbaycharters.com
NOTE : Received : from bassnbaycharters.com (67.212.225.148)
NOTE : Received : (from bassnbaycharters@localhost) by bassnbaycharters.com (8.13.1/8.13.1)
NOTE : X-Mailer : www.bassnbaycharters.com

SAVE LIFE (Diamond Bank Scam)

My dear frieind,

Money in to your count but they are the roung people so i can only adveise you to stop, until i work to give you the right information for you to climb the money from diamond bank, im working in diamond bank as a messenger so i know the trute and the lies going one, i can only adveise you to give me some days to find out trute about you are transaction with diamond bank, i hope if everething work out i have something from you to give me,.

Thanks.
From mr Ubah.

Email analysis :

NOTE : savelifeu@gmail.com

FW: Important documents (Bank Of America Virus)

Cash Pro logo
Cash Pro logo
Important account documents

Reference: C85
Case number: 4690473

Please scan attached document and fax it to +1 (888) 589-3716.

Please note that the Terms and Conditions available below are the Bank's most recently issued versions. Please bear in mind that earlier versions of these Terms and Conditions may apply to your products, depending on when you signed up to the relevant product or when you were last advised of any changes to your Terms and Conditions. If you have any questions regarding which version of the Terms and Conditions apply to your products, please contact your Relationship Manager.

Yours faithfully

Signature Image

Rosalyn Chavez
Senior Manager
Bank of America Commercial Banking
Rosalyn.Chavez@bankofamerica.com

Calls may be monitored or recorded in case we need to check we have carried out your instructions correctly and to help improve our quality of service.

2014 Bank of America Corporation. All rights reserved. CashPro is a registered trademark of Bank of America Corporation.

AccountDocuments.zip

Email analysis :

NOTE : Rosalyn.Chavez@bankofamerica.com
NOTE : yvx@blaudieck.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
NOTE : Received : from unknown (HELO ACSKURDN) (83.231.81.43)


Virus analysis :

OPEN : AccountDocuments.zip
RESULT : AccountDocuments.zip is a VIRUS

ALYac : Trojan.GenericKD.2234787
AVG : Generic_s.ELW
AVware : Win32.Malware!Drop
Ad-Aware : Trojan.GenericKD.2234787
Antiy-AVL : Trojan[Downloader]/Win32.Upatre
Avast : Win32:Trojan-gen
Avira : TR/Crypt.Xpack.166918
Baidu-International : Trojan.Win32.Upatre.vlt
BitDefender : Trojan.GenericKD.2234787
CAT-QuickHeal : TrojanDownloader.Upatre.r4
ClamAV : Win.Trojan.Upatre-582
Comodo : TrojWare.Win32.UMal.~A
Cyren : W32/Trojan.ZDMF-2227
DrWeb : Trojan.DownLoad3.35985
ESET-NOD32 : Win32/TrojanDownloader.Waski.F
Emsisoft : Trojan.GenericKD.2234787 (B)
F-Secure : Trojan-Downloader:W32/Dalexis.B
Fortinet : W32/UPATRE.F!tr
GData : Trojan.GenericKD.2234787
Ikarus : Trojan-Downloader.Win32.Upatre
K7AntiVirus : Trojan ( 7000000c1 )
K7GW : Trojan ( 7000000c1 )
Kaspersky : Trojan-Downloader.Win32.Upatre.vlt
Malwarebytes : Trojan.Upatre
McAfee : Suspect-BW!0D6F95F76EEC
McAfee-GW-Edition : Suspect-BW!0D6F95F76EEC
MicroWorld-eScan : Trojan.GenericKD.2234787
Microsoft : TrojanDownloader:Win32/Upatre.AZ
NANO-Antivirus : Trojan.Win32.Upatre.dpimul
Norman : Upatre.FT
Panda : Trj/CI.A
Qihoo-360 : HEUR/QVM19.1.Malware.Gen
Sophos : Troj/Invo-Zip
Symantec : Downloader.Upatre
Tencent : Win32.Trojan-downloader.Upatre.Hfr
TrendMicro : TROJ_UPATRE.SMNC
TrendMicro-HouseCall : Suspicious_GEN.F47V0319
VIPRE : Win32.Malware!Drop
ViRobot : Trojan.Win32.A.Downloader.28928.D[h]
nProtect : Trojan.Upatre.Gen.2

JP Morgan Access Secure Message (Virus)

Please check attached file(s) for your latest account documents regarding your online account.

Alex Puckett
Level III Account Management Officer
817-283-1539 office
817-878-6079 cell Alex.Puckett@jpmorgan.com
Investments in securities and insurance products are:
NOT FDIC-INSURED/NO BANK-GUARANTEES/MAY LOSE VALUE
2015 JPMorgan Chase & Co.

CONFIDENTIAL NOTICE: The contents of this message, including any attachments, are confidential and are intended solely for the use of the person or entity to whom the message was addressed. If you are not the intended recipient of this message, please be advised that any dissemination, distribution, or use of the contents of this message is strictly prohibited. If you received this message in error, please notify the sender. Please also permanently delete all copies of the original message and any attached documentation. Thank you.

JP Morgan Access - Secure.zip

Email analysis :

NOTE : service@jpmorgan.com
NOTE : tenqvist@cc.oulu.fi
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
NOTE : Received : from 108-84-212-41.lightspeed.hstntx.sbcglobal.net (108.84.212.41)


Virus analysis :

OPEN : JP Morgan Access - Secure.zip
RESULT : JP Morgan Access - Secure.zip is a VIRUS

ALYac : Trojan.GenericKD.2234787
AVG : FakeAlert
AVware : Win32.Malware!Drop
Ad-Aware : Trojan.GenericKD.2234787
Antiy-AVL : Trojan[Downloader]/Win32.Upatre
Avast : Win32:Trojan-gen
Avira : TR/Crypt.Xpack.166918
Baidu-International : Trojan.Win32.Upatre.vlt
BitDefender : Trojan.GenericKD.2234787
CAT-QuickHeal : TrojanDownloader.Upatre.r4
ClamAV : Win.Trojan.Upatre-582
Comodo : UnclassifiedMalware
Cyren : W32/Trojan.ZDMF-2227
DrWeb : Trojan.DownLoad3.35985
ESET-NOD32 : Win32/TrojanDownloader.Waski.F
Emsisoft : Trojan.GenericKD.2234787 (B)
F-Secure : Trojan-Downloader:W32/Dalexis.B
Fortinet : W32/UPATRE.F!tr
GData : Trojan.GenericKD.2234787
Ikarus : Trojan-Downloader.Win32.Upatre
K7AntiVirus : Trojan ( 7000000c1 )
K7GW : Trojan ( 7000000c1 )
Kaspersky : Trojan-Downloader.Win32.Upatre.vlt
Malwarebytes : Trojan.Upatre
McAfee : Upatre-FAAR!05E6E33D4259
McAfee-GW-Edition : Upatre-FAAR!05E6E33D4259
MicroWorld-eScan : Trojan.GenericKD.2234787
Microsoft : TrojanDownloader:Win32/Upatre.AZ
NANO-Antivirus : Trojan.Win32.Upatre.dpimul
Norman : Upatre.FT
Qihoo-360 : HEUR/QVM19.1.Malware.Gen
Sophos : Troj/Upatre-JB
Symantec : Downloader.Upatre
Tencent : Win32.Trojan-downloader.Upatre.Fhz
TrendMicro : TROJ_UPATRE.SMNC
TrendMicro-HouseCall : Suspicious_GEN.F47V0320
VIPRE : Win32.Malware!Drop
ViRobot : Trojan.Win32.A.Downloader.28928.D[h]
nProtect : Trojan.Upatre.Gen.2

Rép :Hello (Cambodia Jail Scam)

Hello, i hope this email gets to you, my name is Heng Pov, former municipal police chief of cambodia,

i got your details from an extensive online search,

I want you to work with my lawyer to receive my funds in Cambodia Bank here. Due to some politically motivated problems i had with the Prime minister, I'm serving a 93 years sentence in cambodia Jail since 2006, but with the help of my Lawyer Kao Soupha, i have appeased the prime minister through a book i wrote to his glory and praise, the prime minister is considering my release through a royal/ premier pardon.

I want you to help me invest the sum of Twelve million united states dollars in your country, which i kept in the bank before my problems , you will get forty percent of all investments, as soon as i'm released from jail, i will come to meet you in your country and as well take my sixty percent, please keep this a secret as no one else knows except my lawyer and my Financial account manager.

If you want to help out , contact my lawyer immediately with this email kaosoupha@yahoo.com.hk

Yours faithfully,
Heng Pov.

Email analysis :

NOTE : kaosoupha@yahoo.com.hk
NOTE : hengpov68@yahoo.com
NOTE : Received : from v157-7-121-66.z1d15.static.cnode.jp (HELO WIN-CSOJ1NVO7GS) (157.7.121.66)


NOTE : Received : from User ([36.37.199.103]) by WIN-CSOJ1NVO7GS

BUSINESS PROPOSAL. PLEASE READ CAREFULLY BEFORE GIVING ME YOUR REPLY (NNPC Scam)

Dear Sir/Madam,

Good day and compliments. I am contacting you based on a business proposal that I know will benefit both you and I. I am Mr Richmond Momoh. I am the personal accounts officer to one late Mr Erickson Brandon, a native of United States of America. He lived in Nigeria together with his family. Until his death, Mr Ericsson Brandon was a federal contractor to Nigeria national petroleum company (NNPC) and supplied most of the fittings used to upgrade our country's international air-ports. I personally handled all his financial transactions and legal matters which made him leave most of this vital payment documents under my care because of how close we were and the trust and confidence he had on me. Mr Erickson was a hard working man but was unfortunate as him and his entire family was wiped out in Dana air crash that happened last 3 years and this I have not disclosed to my bank or any person till date. Before the untimely death of Mr Erickson, he made a supply of oil tools to the NNPC which amount to $200,000,000 (Two hundred million US dollars). The money was paid and he deposited the entire sum with my bank on 2 years time period. Now as his personal accounts officer, the the 2 year maturity period has now expired and my bank is trying to reach him or any of his r elatives so that they will pay thi Now to cut the whole story short, I want to present you as Mr Erickson's next of kin so that this money will be paid to you while we share the money in 2 equal half's. I want to assure you that I have the duplicate deposit certificate of this money and all I want is a sincere person who will not run away or disappear with the whole money when it is paid into his account because the money will be paid into a foreign account which should be yours, I will come to your country immediately the money is transferred into your account for sharing. I will personally hire a registered attorney to handle all the legal documents and notaries. Now why I am contacting you is based o these two facts:

(a) I need a foreign person to present as the next of kin as he will also bring his account for the money to be paid in.
(b) Because I cannot finance to pay for the documents alone hence why I need you so that we share the expenses equally.

The only challenge we have here is money to raise original DEPOSIT CERTIFICATE, CONTRACT APPROVAL AND AWARD CERTIFICATE FROM NNPC AND JOB COMPLETION ORDER. These will be attached with a POWER OF ATTORNEY FROM A REGISTERED SENIOR ADVOCATE OF NIGERIA which shall be stamped and sealed at the federal high court, Abuja. Be assured that the process is so easy and takes less time. what I need is someone who will support financialy to gather the documents so that this fund will be transfered into your account. The money that I seek will be used for validation of documents and signing of relevant payment receipts but most especially to acquire these 4 vital documents (original DEPOSIT CERTIFICATE, CONTRACT APPROVAL AND AWARD CERTIFICATE FROM NNPC AND JOB COMPLETION ORDER) all these documents will have you as his only next of kin to make it authentic and official. Note I will be a silent partner but will also contribute financially for these. I would not have done this if there if I have seen any of Mr Erickson Brandon family to claim the money but as it is right now if I leave it or make my bank to know that he is dead and none of his family member is around, some few managers will sit together and share the money within themselves. This is not the first time I have seen it happen, so it is better for me to have it than to allow them share the money and continue growing bigger I cannot move the money in my name because he was my client and it could create suspicion hence the importance of your assistance. Have my assurance that there is nothing to fear about, as I also need your assurance that you would work with me with a high degree of honesty and sincerity to achieve our desired objective. The legal procedure is no problem for I would be responsible Since the codicil was not ready before his death, a letter of administration without WILL would be secured from the probate office. With this letter I would personally apply on your behalf to the bank for the release of the funds to you. Below is required from you to enable
us achieve the above;

1. YOUR NAME
2. ADDRESS
3. CONTACT PHONE NUMBER
4. DATE OF BIRTH AND AGE
5. OCCUPATION
6. WORK ADDRESS AND PHONE NUMBER
6. SCANNED COPY OF YOUR DRIVERS LICENSE.

I will highlight you with the remaining details and way forward on hearing from you and will furnish you with the whole information you need to know about this transaction on your reply.

Yours faithfully,
Mr Richmond Momoh

Email analysis :

NOTE : richard.momoh2ac@gmail.com
NOTE : contactus@jltrenovations.com.au
NOTE : Received : from hscmty.com (189-211-173-148.static.axtel.net. [189.211.173.148])
NOTE : Received : from User ([172.16.1.1]) (authenticated bits=0) by mail.hscmty.com