Saturday, April 2, 2016

Please Confirm (Dropbox Phishing)

Please confirm

Attached PO and TT copy, check on dropbox. Our agent will contact you soon for Carton design.

Regards,
UhlSport Gmbh
+49-219383112

http://www.diabeez.in/cgisys/dropboxx/downloadPO-D1956-1.htm?

Phishing analysis :

CLICK : http://www.diabeez.in/cgisys/dropboxx/downloadPO-D1956-1.htm?
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://www.dropbox.com/s/paic7kvmg1lqnsg/PO%201026240.pdf?dl=0
SCREENSHOT :


Email analysis :

NOTE : mldminn@outlook.com
NOTE : 25.152.2.60 as permitted sender
NOTE : X-Ms-Exchange-Crosstenant-Originalarrivaltime : 01 Apr 2016 08:47:01.9167 (UTC)
NOTE : X-Originatororg : outlook.com
NOTE : X-Ms-Exchange-Transport-Crosstenantheadersstamped : VE1EUR01HT230
NOTE : X-Forefront-Antispam-Report : CIP:25.152.2.60;IPV:NLI;CTRY:GB;EFV:NLI;SFV:NSPM;SFS:(10019020)
NOTE : Authentication-Results : spf=softfail (sender IP is 25.152.2.60)
NOTE : X-Ms-Exchange-Crosstenant-Fromentityheader : Internet
NOTE : Accept-Language : en-US
NOTE : Content-Language : en-US
NOTE : Mime-Version : 1.0
NOTE : Please Confirm

Notes from Scam.cz :


  • 25.152.2.60 servers were used to relay this phishing.
  • 25.152.2.60 = UK Ministry of Defence
  • https://www.gov.uk/government/organisations/ministry-of-defence
  • Inside the UK ministry of defence, there is a station relaying dropbox phishing.

From Dr. Fabien Barou.

UNITED NATIONS COMPENSATION IN CONJUNCTION WITH FEDERAL GOVERNMENT OF COTE D’IVOIRE IN AFFILIATION WITH WORLD BANK.

ATTN: Beneficiary,

Hope all is well with you and Your family?, you may not understand why this mail came to you,It is in regards to the recent meeting between the United Nations and the Present United States Government to restore the dignity and Economy of the Nations, Base on the Agreement with the World Bank Assistance to help and make the world a better place for all with the sole aim of abolishing poverty. We have been having a meeting for the passed 7 months which ended 2 days ago.

The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Cote D’Ivoire his Excellency President Alassane Ouattara to boost the exercise of clearing all foreign debts owed to Foreigners and Compensate all that have lost their hard earned money from African Fraudsters.

This email is to all the people that have been scammed in any part of the world, the UNITED NATIONS have agreed to compensate them with the sum of USD$850,000 each (Eight hundred and fifty thousand United State Dollars), this includes every foreign contractors that may have not received their contract sum, and people that have had an unfinished transaction or international businesses that failed due to Government problems, Contracts Sum, Lottery/Gambling etc.

Your name and email was in the list submitted by our Monitoring Teams and the Federal Bureau of Investigation (FBI) observers and this is why we are contacting you, this have been agreed upon and have been signed.

You are advised to get back to me immediately, as I am the representative in Cote D’Ivoire, so contact me immediately for your Cheque worth the total sum of USD$850,000 (Eight hundred and fifty thousand United State Dollars). This funds are in DRAFT Form for security purpose ok? So I will send it to you via UPS Courier Company and you can clear the CHEQUE in any bank of your choice in your country.
Contact me immediately for your Cheque delivery with the following information’s.

1. Full name:...............
2. Phone and Fax number:.............
3. Address:............
4. Your age and current occupation:..........
5. Your International passport:..............

NOTICE: This E-mail is covered by the
Electronic Communication Privacy Acts, 18 U.S.C Sec 2510-2521, is Confidential and may be legally privileged.

The information is solely For the use of the addresses named above. If you are not the intended Recipient, any disclosure, copying, distribution, or other use of the Contents of this information are strictly prohibited.

Thanks,
Best regards,
Dr. Fabien Barou.

Email analysis :

NOTE : fabien_barou10@yahoo.co.jp
NOTE : fabien.barou@onet.eu
NOTE : Received : from [146.185.31.215]

HELLO MY DEAR

Hello dear,

My name is Miss Aimal Hashmi, As I search for a nice friend and came across your contact, My mind and my heart told me to contact you for friendship, A friend who truly understand his or her friend and share their feelings together. please kindly accept my request.

Your Friend, Aimal

Email analysis :

NOTE : aimalhashmi153@yahoo.com
NOTE : aimaldemian@yahoo.com

URGENT REPLY

Dear Friend

Please accept my apologies, I do not want to invade your privacy .I am Barrister Aman Luky i wrote ealier mail to you but no answer.In my first post i informed you about my late client Gershon ,which bear the same surname with you.After his death i received several letter from the bank where he made a deposit of us$14M (fourteen million United States dollars).before his death.The bank ask me to provide his next of kin or any of his relative who may make his claim to the fund,otherwise it will confiscated by the bank because i could not locate any of his relative hence i contacted you for this claim since you have the same surname with him.After your reply i shall give you the details and the procedure of the transaction,waiting to hear from you.

Yours faithfully,
Barrister.Aman Luky.

Email analysis :

NOTE : amanluky2001@gmail.com
NOTE : stellajames.lawyer@gmail.com

DEAL

Hello,

I have a transaction deal for you privately. Contact me for more details.

Regards,
Iain.

Email analysis :

NOTE : iainconn@outlook.com
NOTE : janne.kuhn@wur.nl

YOUR PAYMENT SLIP IS READY

SWIFT MESSAGE
Swift Input : FIN103 CUSTOMER CREDIT
Date of issue : 14 / 03/ 2016
Maturing At : / 24 / 03/2016
Amount : 950,000.00 USD

TRANSIT BULK DELIVERY TRANSFER NOTIFICATION: REF. S076554920134392/AF298/WQM1/Z01

Hello Dear,

We refer to the thirty- six (36) payments sent to our branch on the 14th of March 2016 under the instructions of the International Centre for Settlement of Contracts & Investments Disputes (ICSID) which is a United Nations World Bank Assisted Project to compensate 100 owed foreign contractors/Scam victims with the sum of US$950,000 each through Western Union Services. Further to this, Your name was shortlisted and submitted to us as the beneficiary to one of the payments under the above-mentioned transaction references. We have been trying to reach you on the phone to give you the MTCN and the deposit slip all to no avail. However, be informed that We have concluded arrangement to effect your payment through a daily Money Transfer Control Number (MTCN). But the maximum amount you shall be receiving henceforth is $5,000 daily until the total funds is completely paid out to you. Kindly contact Western Union Branch Agent with the below information for the pick up details:

Contact Person: Brown Cooper
Contact Email: swiftpaymasters-online@hotmail.com
Contact Phone Number: +2349090918039

Make Sure you contact him with your Contract/Inheritance reference number S076554920134392/AF298/WQM1/Z01 and your current contact details such as;

1. Your Full Names: ...............................
2. Your Cell Phone Number:.........................
3. Your Home Address: .............................
4. Your Occupation:................................
5. Your Age and Sex:...............................

Although, a non-activated daily installment of 5,000.00 USD has been inputted and sent to your name, hence you are to activate your account with them for security reasons, so kindly contact Mr.Brown Cooper and tell him to give you the MTCN, Sender Name, Question/Answer to pick the 5,000.00 USD.

Please let me know as soon as you have received it.

Thank you.
David Johnson.
Branch Mgr, Product/Service Dept.

Email analysis :

NOTE : swiftpaymasters-online@hotmail.com
NOTE : alert4@westernalert.es.cx