Monday, July 6, 2015

TRUST

Attention :

I am Stanley Rodney a solicitor at law. I am the personal Attorney to Late Engineer. Pete J French a national of your country, who lived here in South Africa, Hereinafter shall be referred to as my client. On the 21st of April 2013, my client was involved in a car accident along Gauteng Freeway. All occupants of the vehicle unfortunately lost their lives. I have contacted you to assist in repatriating the money and property left behind by my client before they get confiscated or declared unserviceable by the bank where this huge deposit was lodged. Particularly, The Bank of North West and finance company where the deceased had an account valued at about 40 million dollars has issued me a notice to provide the next of kin or have the account confiscated. Since I have been unsuccessful in locating the relatives for over 2 years now I seek your consent to present you as the next of kin of the deceased since you have the same last name so that the proceeds of this account valued at 40 million dollars can be paid to you. If you agree we can discuss your percentage. I have all necessary legal documents that can be used to back up any claim we may make. All i require is your honest Co-operation to enable us see this deal through. NB: I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law.

Awaiting your response.
Best regards,
Stanley Rodney.

Email analysis :

NOTE : barrister_stanleyrodney@accountant.com
NOTE : test@biomen.com.tr
NOTE : Received : from [219.117.254.70] by SNMXL026
NOTE : (ArGoSoft Mail Server Freeware, Version 1.8 (1.8.9.2));

Urgent Information

Att: Beneficiary,

This is to bring you notice that the Internal Revenue Service and Federal Bureau of Investigation have register your ATM VISA CARD with DHL COURIER .And the card's value is $3.5 millions united state dollars,so The delivery charges has been paid by the Government but they did not pay their official keeping fees since they refused.Reasons for their refusal is because they do not know when you are going to contact them because the keeping fee is $150 dollars per a day.And I deposited it yesterday being 2nd July 2015 So that is reason why they did not pay for keeping fee and that is what you are going to pay them, So I want you to contact them urgent to avoid increase of their keeping fee.

Contact Mr.Johnson Udo
DHL DIRECTOR GENERAL
E-mail : ( mrjs50751110@yahoo.com )
Phone +234 8176945498

This are the information needed for easy delivery of your CARD.

1.YOUR FULL NAME_____,
2.YOUR HOME ADDRESS______,
3..YOUR PHONE AND CELL NUMBER____,
4.A COPY OF YOUR PICTURE____,
5.YOUR COUNTRY_____

So as soon as you recieved your card do let me know ok,

Best Regard
Mrs.Jane Kane

Email analysis :

NOTE : infos@irs.gov
NOTE : mrjs50751110@yahoo.com
NOTE : Received : from User (unknown [46.183.223.50]) by mail01.mmn.jp


NOTE : Received : from mail01.mmn.jp ([127.0.0.1]) by localhost (mail01.mmn.jp [127.0.0.1])
NOTE : Received : from User (unknown [46.183.223.50])

revised order ( Virus )

Dear Sir,

Attach is our revised order, Waiting for your invoice

Thank you.
Ahmed Ragheb
Assad Business LLC
Tel:86-22-28246951

Download

File analysis :

CLICK : Download
OPEN : http://ge.tt/api/1/files/649DtgJ2/0/blob?download
DOWNLOAD : Revised Order..........rar
CONCLUSION : This is a virus.

Virus analysis :

SHA256: 6c6ff658c9a8c574898c139d40069db25e2f3377615269e35ae29ee3d2a17db5

AVG MSIL8.APEG
Ad-Aware Gen:Heur.MSIL.Androm.10
Arcabit Trojan.MSIL.Androm.10
Avast Win32:Malware-gen
Avira TR/Dropper.MSIL.52174
BitDefender Gen:Heur.MSIL.Androm.10
DrWeb Trojan.DownLoader14.27222
ESET-NOD32 a variant of MSIL/Injector.KNB
Emsisoft Gen:Heur.MSIL.Androm.10 (B)
F-Secure Gen:Heur.MSIL.Androm.10
GData Win32.Trojan-Dropper.Agent.GP
Kaspersky Trojan.MSIL.Inject.ccfx
Malwarebytes Spyware.Password
McAfee Dropper-FOC!BABC3B054967
MicroWorld-eScan Gen:Heur.MSIL.Androm.10
Panda Generic Suspicious 20150705
Sophos Mal/MSIL-OY
Symantec Suspicious.Cloud.5
TrendMicro HEUR_NAMETRICK.B
TrendMicro-HouseCall TROJ_GE.FE94127C

Email analysis :

NOTE : md.hashem2012@gmail.com
NOTE : Received : by 10.194.125.14 with HTTP

Urgent Business Project from Capt Michael Brown

Dear Beloved Friend.

My name is Captain Michael Brown, an American soldier serving in Afghanistan, I have an important matter, which I would like to discuss with you in what follows:

I want to bring to your notice that I have the sum of (10,500,000 Dollars) which I got from crude oil deal here in Afghanistan, I deposited this money with a Finance company here, and I have secured this money in a box before depositing it with the Finance company vault as Research materials & Personal Effects., The only thing I Require from you is just for You to help me move the money out of Afghanistan through a diplomatic means because as a uniform man I can not parade with such amount.

I am in need of a Reliable and Trust worthy person who will receive the cash-box, secure and protect it till my arrival in your country, which should be soon. I have to take this chance because, I have no other alternative and I am an orphan with no brother non sister, so I cannot risk my life here to avoid an end to my family lineage. All I have is my wife, my daughter and son and they deserve a decent life since I want them to grow up in a peaceful environment. I will relocate to your country with my family and invest the money in accordance with the law, your advice and assistance. We can work together and achieve a better future for our families.

All I ask is to permit me to move the money from the Finance Company to your country in your name as family treasure/ research materials through a diplomatic means. I will assume you are capable of handling a deal of this magnitude and also trust you to maintain absolute secrecy and confidentiality to protect this great achievement.

Note that I have taken precautionary measures to secure the money and the box is coded with high security gadget and am the only one that has the right combination to unlock it. I will give you 20% of the money and 80% for me. I believe this is a fair deal. I have mapped out a strategy of using Diplomatic Means to Move the money out of Afghanistan to your country. If you are interested in the deal furnish the following:

Your full name,
Your private phone number,
Your full address.
Age and occupation.

I anticipate your positive response and on receipt of your information I will provide you with further details on what to do. We don't have the luxury to waste time so kindly respond ASAP.

Best regards,
Michael Brown.

Email analysis :

NOTE : cptmichael776@qq.com
NOTE : marylouis63@yahoo.com

YOUR FUND IS CONVERTED

Dear Benficiary,

How are you today, I hope all is well .Be informed that due to your delay , the YOUR FUND IS CONVERTED worth of ($37 USD Million) was converted into ATM-Card which you can withdraw in any ATM Cash Point Machine Worldwide have been programmed by the issuing bank .Note that the issuing bank has package the ATM CARD with the secret code and registered it with dhl courier service. Also you will be withdrawing sum of US$5,000.00 per day.Therefore, quickly contact DHL COMPANY with bellow information:

Your full name_____________________
Your address__________________________
Your country_______________________
Your age ___________________________
Your occupation____________________
Your Phone number__________________
Director: Mr.Kelly Brown.

Email address: (dhl-courierservicess@diplomats.com)+234-7039363236
The only money you have to send to DHL COMPANY is only US$195, according to the director of the issuing bank for the smooth delivery of your package to your door step. Also you should refirm your full NAME, ADDRESS, TELE PHONE NUMBER AND DRIVER'S LIC OR PASSPORT to them to avoid wrong delivery.
Yours faithfully.
Rev. kingsley john

Email analysis :

NOTE : YOUR FUND IS CONVERTED
NOTE : dhl-courierservicess@diplomats.com
NOTE : seiki104@seiki104.com
NOTE : Received : from seiki104.com (61.126.17.241)
NOTE : Received : from User (unknown [197.242.116.123])


NOTE : by seiki104.com (Postfix)

Hello/Hallo

Hello,

We are on the look out for businesses searching for start up or expansion capital in order to capitalize on a specific competitive advantage within any industry. Do send in your detailed proposal should you be interested in our investment/Loan offer

Thanks
Jimmy Lien
========
Hallo,

Wir sind auf der Suche für Unternehmen auf der Suche nach Inbetriebnahme oder Expansionskapital um Kapital zu einem bestimmten Wettbewerbsvorteil in jeder Branche.
Sie senden Sie Ihre ausführlichen Vorschlag sollten Sie sich für unsere Investition / Darlehen anbieten zu können

Vielen Dank
Jimmy Lien

Este mensaje ha sido analizado por MailScanner
en busca de virus y otros contenidos peligrosos,
y se considera que está limpio.
MailScanner agradece a transtec Computers por su apoyo.

Email analysis :

NOTE : autocfld13@gmail.com
NOTE : comparecencias@dgp-polinal.gob.ec
NOTE : Received : from [104.255.64.43] ([104.255.64.43])
NOTE : (authenticated bits=0) by mail.dgp-polinal.gob.ec (8.14.4/8.14.4)
NOTE : client-ip=181.112.222.154;