Wednesday, October 28, 2015

Rép : What is the most popular CONFETTI EFFECTS in 2016?

Hello,

Our company have some new products, all of them are fashion very much.

Such as confetti paper , confetti shooter , confetti machine .

Below are our latest production for your reference, if you have interesting,
I will send you our catalog later, thank you very much!

More Information please visit our business website (www point *** point com ),

Welcome to visit our factory at any time.

Thanks and best regards!

Sales Manager: Selina-sun

CONFETTIOFFER
TEL: 86-519-83758526

Email analysis :

NOTE : jqrjdyls@nruc.com
NOTE : huixinsoft45@foxmail.com
NOTE : 123.138.244.181 ()

UNITED NATIONS NATIONAL AUDIT OFFICE

UNITED NATIONS NATIONAL AUDIT OFFICE
BUCKINGHAM PALACE ROAD, VICTORIA
LONDON SW1W 9SP,
UNITED KINGDOM.

Attention: Beneficiary

We sincerely apologize for sending you this sensitive information via e-mail instead of a certified mail, phone call or a face-to-face conversation, it is due to the urgency and importance of the security information involved. In the quest to cushion the effect of the global financial crisis, American government through the Federal Bureau of Investigation (FBI) Washington DC, United Nations and the Internet Crime Complaint Center (ic3) has signed an agreement with Nigeria & EFCC for an immediate release of all overdue funds presently logged in their treasury and ensure it is disbursed to the rightful beneficiaries in any part of the world. If you the beneficiary would adhere to this notification it will help stabilize the various economies of the world and reduce the effect of this depressing recession.

Prior to this agreement our team of security experts has swung into action for transparency and accountability of this periodic project. The Federal Bureau of Investigation (Global Intelligence, Cyber Division) saddled with the responsibility of monitoring activities going on over the internet have discovered your name in the list of unpaid beneficiaries and it might interest you to know that we have conducted a comprehensive investigation on this discovery as stipulated on our protocol of operation and have confirmed that the funds was endorsed in your favor and it is 100% genuine and hitch free from all facets. You have the lawful right to contact the appropriate authority to claim your payment without further delay. Under the Joint Regulatory Commission, we have appointed a sole fiduciary member of UNITED BANK FOR AFRICA (UBA) PLC that will handle the transfer of your funds through ATM CARD Payment. This card centre will send you an ATM CARD which you will use to withdraw your money in any ATM Machine located in you designation/any part of the world, the maximum amount to withdraw are three thousand dollars per hour.

Therefore; send us the below information to the above address to enable the ATM Card Department start processing your ATM CARD.

1. Your full name
2. Phone number & fax
3. Address where you want them to send the ATM CARD
4. Your Age & Current Occupation
5. Attach copy of your Identification.

The UBA ATM CARD payment centre has been mandated to issue out USD15, 000,000.00 as part payment for your Contract/Inheritance/Lottery Winnings for this fiscal year 2015. Also for your information, you have to stop any further communication with any other person (s) / office (s) to avoid any hitches in receiving your payment. And note that because of impostors, we hereby issued you our code of conduct which is (ATM-05AS)) so you have to indicate this code when contacting the UBA card centre by using it as your subject.
Thanks.

Dr.James Attah
SEC.UNITED NATIONS
PANEL OF FOREIGN AFFAIRS

Email analysis :

NOTE : Attah@solid.ocn.ne.jp
NOTE : cardatm251@yahoo.in
NOTE : Received : from mzcstore042.ocn.ad.jp (mv-osn-hcb009.ocn.ad.jp [122.1.235.83])
NOTE : by mv-osn-hcb009.ocn.ad.jp (Postfix)
NOTE : X-Originating-Ip : [41.85.176.94]
NOTE : X-Remote : 153.149.233.27 (mbkd0226.ocn.ad.jp)

Tuesday, October 27, 2015

We were unable to process your most recent payment... (Amazon Phishing)

Amazon.com

Today's Deals See All Departments

= = = = = = = = = = = = = = = = = = = =

We were unable to process your most recent payment. Did you recently change your bank, phone number or credit card?. To ensure that your service is not interrupted, please update your billing information today.

Confirm your account now

We're available 24 hours a day, 7 days a week. If you have recently updated your billing information, please disregard this message as we are processing the changes you have made. If you need further assistance with your order.

= = = = = = = = = = = = = = = = = = = =

Amazon.com
Connect with us

Phishing analysis :

CLICK : Confirm your account now
OPEN : http://www.intellectualjourneyofenlightenment.org/admin/css/amazon.com-verification/id/
RESULT : This Account Has Been Suspended

intellectualjourneyofenlightenment.org whois :

Registrant ID:DI_41908394
Registrant Name:Atul Kumar Jain
Registrant Organization:intellectualjourneyofenlightenment.org
Registrant Street: 363, sec 15
Registrant City:Panchkula
Registrant State/Province:Haryana
Registrant Postal Code:134114
Registrant Country:IN
Registrant Phone:+91.9888054461
Registrant Email:atul.jain2711@gmail.com
Admin ID:DI_41908394

Email analysis :

NOTE : noreply@amzon.support82.e-i.com
NOTE : 192.163.247.190 (ami.amiableargument.com)
NOTE : X-Source-Args : /usr/bin/php /home/wwwtheiv/public_html/clientscript/ie7/wp-confiiig.php
NOTE : Received : from wwwtheiv by ami.amiableargument.com
NOTE : (envelope-from < wwwtheiv@ami.amiableargument.com >)
NOTE : X-Mailer : theivoryquill.com
NOTE : X-Php-Script : theivoryquill.com/clientscript/ie7/wp-confiiig.php
NOTE : for 185.109.161.21


NOTE : X-Get-Message-Sender-Via : ami.amiableargument.com:
NOTE : authenticated_id: wwwtheiv/only
NOTE : user confirmed/virtual account not confirmed

Payment Swift Copy

sir,

Upon request,Your customer has advised for your payment. Be informed that the following payment is made to your account as per attached HSBC payment swift copy. You are adviced to confirm receipt of payment as detailed.

Yours faithfully,
Global Payments and Cash Management.

HSBC

1 HSBC Payment Swift copy.doc (total 1.3KB)

View slide show (1)Download

Link analysis :

NOTE : http://peridotsgroup.com/colins/HSBC%20Payment%20Swift%20copy.doc
NOTE : BitDefender : Malware site
NOTE : Emsisoft : Malware site

File analysis :

Avira : EXP/CVE-2012-0158
CAT-QuickHeal : Exp.RTF.CVE-2012-0158
DrWeb : Exploit.Rtf.CVE2012-0158
Kaspersky : Exploit.Win32.CVE-2012-0158.j
Qihoo-360 : virus.exp.20120158
Rising : NORMAL:Hack.CVE-2012-0158.a!1614593 [F]
Sophos : Troj/DocDrop-DT
Symantec : Bloodhound.RTF.3
TrendMicro : HEUR_RTFMALFORME

Email analysis :

NOTE : purchasemanager@tescogroup.com
NOTE : Received : by endpoint708401cf.chios.panth.io
NOTE : 162.242.168.6 ()

Openings? (Virus)

Hi there.

I saw your business today Sat, 24 Oct 2015 and found it very likeable.
I was praying there was any possibility of employment, just to prove my competence.

As you will see in my resume, I am very qualified and have a very sweeping experience in this field of work. I am confident it will be worth your time reviewing it, and I am even more positive you will find me very suitable in your corporation.

Please see my CV.

I'm very much looking forward to hearing from you.

Thanks,

Theda Deisch

My_Resume_64004.doc

My_Resume_64004.doc analysis :

My_Resume_64004.doc is a virus.

Virus analysis :

AVware LooksLike.Macro.Malware.h (v)
AhnLab-V3 : DOC/Downloader
Arcabit : HEUR.VBA.Trojan
CAT-QuickHeal : O97M.Dropper.LQ
Fortinet : WM/Agent!tr
Ikarus : Trojan-Downloader.VBA.Agent
Sophos : Troj/DocDl-AFA
Symantec : W97M.Downloader
TrendMicro : TROJ_FRS.0NA004JP15
TrendMicro-HouseCall : TROJ_FRS.0NA004JP15
VIPRE : LooksLike.Macro.Malware.h (v)

Email analysis :

NOTE : thedaobmhf@rambler.ru
NOTE : Mime-Version : 1.0
NOTE : 81.19.67.206


NOTE : X-Rambler-User : thedaobmhf@rambler.ru/117.253.216.19


NOTE : X-Mailer : Rambler WebMail, http://mail.rambler.ru/
NOTE : Received : from [117.253.216.19] by mail.rambler.ru
NOTE : Openings?

LUCRATIVE DISTRIBUTORSHIPS AVAILABLE

We are a U.S. company looking for distributors worldwide. We have been manufacturing and distributing slip-resistant floor treatments for more than 26 years! One 30 minute application with our Amazing Anti-Slip Floor Treatment will make floors slip-resistant and safe for 4 years - Guaranteed! Indoors or Outdoors No Change in Appearance For use on: Ceramic, Marble, Granite, Porcelain and Quarry Tiles Concrete, etc.. Typical Applications: Restaurant Kitchen Floors, Office Buildings, Hotels, Hospitals, etc.

Some of our satisfied customers: , Kroger, Holiday Inn, McDonald's, Miami Children's Hospital Pfizer, etc. Please contact us for details and to see if there is a distributorship available in your country. For an Exclusive Distributorship, an Initial Inventory Investment of $5,000 USD - $20,000 USD is required, depending upon the country.

Best regards,
Jeremy
Email: ydiney@tom.com

PLEASE INCLUDE YOUR NAME, COUNTRY & E-MAIL ADDRESS

Email analysis :

NOTE : diurios@mail.com
NOTE : Received : from lydia.pu88.net (31.220.42.101)