Wednesday, March 16, 2016

Action Needed: Verify Account Information's (USAA Phishing Attempt)

To ensure the clear view of the message, please click show images and move it to your inbox folder.

USAA Member Home
Verify Account Information's

Dear USAA Customer,

We're currently upgrading our systems to bring enhanced features to your USAA Account experience. As a result, your account is temporarily unavailable.
Please download the file attached and upgrade your USAA Account to our new system.

Note: FAIL TO UPGRADE YOUR ACCOUNT, IT WILL BE AUTOMATICALLY CLOSED.

After this step, you are permitted to access your usaa.com System.

Thank you,
USAA

Please do not reply to this e-mail. To ensure the safety of your account, please update your information in our database.
USAA, 9800 Fredericksburg Road, San Antonio, Texas 78288.

USAA means United Services Automobile Association and its insurance, banking and investment affiliates.
87832-0713

Update_Account_Information's-USAA.html

USAA Phishing attempt analysis :

- The phishing was an html page.
- The page is also available as a raw file : http://pastebin.com/raw/B4DLgJe8

Email analysis :

NOTE : fevima@infonegocio.com
NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < fevima@infonegocio.com >
NOTE : X-Priority : 3
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Received : from pop.prtcnet.org (pop.prtcnet.org. [69.176.19.5])
NOTE : Received : from [46.21.150.135] (helo=User) by pop.prtcnet.org


NOTE : client-ip=69.176.19.5;
NOTE : Action Needed: Verify Account Information's

SCAM VICTIM COMPENSATION PAYMENT VIA ATM CARD

SCAM VICTIM COMPENSATION PAYMENT VIA ATM CARD
STANDARD CHARTERED BANK/UNITED NATIONS
COMPENSATIONS PAYMENTS DIRECTIVE

SCAMMED VICTIM/$2.5 MILLION BENEFICIARY.REF/PAYMENTS CODE:06654 $2.5MILLION USD

This is to bring to your notice that I am delegated from the United Nations and Standard Chartered Bank to pay 100 Africa 419 scam victims $2.5 Million each, you are listed and approved for this payments as one of the scammed victims,get back to us as soon as possible for the immediate payments of your $2.5 Million compensations funds.

On this faithful recommendations, I want you to know that during the last UN meetings held at Porto Novo,Capital Of Benin Republic,it was alarmed so much by the rest of the world in the meetings on the lose of funds by various foreigners to the scams artists operating in syndicates all over the world today,in other to retain the good image of Africa,the president of the UNITED NATION is now paying 100 victims of this operators $2.5Million USD each,Due to the corrupt and inefficient banking systems in Africa,the payments are to be paid by Standard Chartered Bank as corresponding paying bank under funding assistance by the National Westminster bank London.

According to the number of applicants at hand,56 beneficiaries has been paid,half of the victims are from the United States and Asia,we still have more 44 left to be paid the compensations of $2.5Million each. Your particulars was mentioned by one of the syndicates who was arrested in Africa as one of their victims of the operations,you are hereby warned not to communicate or duplicate this message to them for any reason what so ever,the US secret service is already on trace of the
criminal,You can receive your compensations payments via ATM CARD PAYMENT.

Furthermore you are advice to reconfirm you billing address include your full name and direct contact telephone number to the Managing Director of Swift Card Consultant Payment Center for the certified ATM Card, the contact information is as follows:

MANAGING DIRECTOR SWIFT CARD
STANDARD CHARTERED BANK
DR Steve Richmond
Email:( Stmond11@gmail.com )
TEL PHONE: +229-.68760182

Email analysis :

NOTE : stmond11@gmail.com

Rép : Official/ Please confirm..

Dear Friend,

Please accept my sincere apologies if my mail does not meet your personal ethics.

This is the second time I'm writting you this message because I have been trying to get in touch with you after our last discussion but could not reach you, please permit me to advice the Bank to wire the sum of £12,780.000.00 Million Pounds (transfer) to your Account for you and I to share. I will like to introduce myself again in case if you have forgotten,Am Mr.Darel Williams; Am From Harlsden, North West London here in England. I work as a Staff in the accounts management Section,monitoring financial network here in the United Kingdom. Please I will be delighted if you can get back to me urgently so that I can advise you further on how we van proceed in getting this fund transfer to your nominated bank account immediately. Hope you remember that our sharing ratio is still the same, 45% you and 55% for me.

Please, provide me the following as we have 7 days to run it through thus:

1. Full Name.
2. Your Direct Mobile Number.
3. Your Contact Address.
4. Your Age.
5. Your Occupation.
6. Fax Number.

Also I want you to reconfirm your current address and telephone number to me to enable us move swiftly.

Best Regards,
Mr. Darel Williams.

Email analysis :

NOTE : dw196952@yandex.com
NOTE : guh5@vvgcc.my.vg
NOTE : Received : from [192.168.1.15] (154.120.100.36)

COMPLIMENTS!!

My Dear,

It's another new day, how was your night, hope my mail finds you in good health. I am writing this mail to you with tears and sorrow from my heart. With due respect trust and humanity, I appeal to you to exercise a little patience and read through my letter. I am Miss. Mary A. Coulibal 24 years old female from the Republic of Ivory Coast, West Africa, am the Daughter of Late Chief Sgt. Warlord Ibrahim Coulibal (a.k.a General IB ). My late father was a well known Ivory Coast militia leader. He died on Thursday 28 April 2011 following a fight with the Republican Forces of Ivory Coast (FRCI). You can read more about my father in the link below.

http://www.guardian.co.uk/world/2011/apr/28/ivory-coast-renegade-warlord-ibrahim-coulibaly

I am constrained to contact you because of the maltreatment which I am receiving from my step mother. She planned to take away all my late father's treasury and properties from me since the unexpected death of my beloved Father. Meanwhile I wanted to travel to Europe, but she hideaway my international passport and other valuable documents. Luckily she did not discover where I kept my father's File which contained important documents. Now I am presently staying in the Mission in Ghana while I am seeking for long term relationship and investment assistance. My father of blessed memory deposited the sum of 19.5 Million EUROS in one of the Leading bank in Europe with my name as the next of kin. I had contacted the Bank to claim the deposit but the bank Manager told me that being a refugee, my status according to the local law does not authorize me to carry out the operation. However, he advised me to provide a trustee who will stand on my behalf. I had wanted to inform my step mother about this deposit but I am As you indicate your interest to help me I will give you the contact information of the bank where my late beloved father deposited the money with my name as the next of kin. It is my intention to compensate you with 35% of the total money for your assistance, and 10% for all the expenses that may be needed for transfer cost, please you will help me to invest the remaining 55% in any profitable venture which you will recommend to me as i have no any idea about foreign investment. If you are interested to help me please send me your contact information such as;

1. YOUR FULL NAMES
2. HOUSE ADDRESS.
3. AGE, SEX AND MARITAL STATUS.
4. OCCUPATION.
5. NATIONALITY.
6. CELLPHONE AND FAX NUMBERS FOR EASY COMMUNICATIONS.

So that I will forward them to the bank where the money is
deposited as the bank manager advised me to provide a trustee who will stand on my behalf to receive the money for me
to help me invest it.

Anticipating to hear from you soon.
Thank you and God bless you!
Regards.
Miss. Mary A. Couliba

Email analysis :

NOTE : mary.coulibal@aol.com
NOTE : mary@poep.th.tn
NOTE : Received : from WIN-F2RBH85S1AU.cs2ddcloud.internal (175.99.87.209)

YOUR OVERDUED FUND TRANSFER.

ATTENTION;THE REAL OWNER OF THIS EMAIL ADDRESS,
Congra tulations///

This is to inform you that your Lottery draw winning funds totaling the sum of $6.5musd has being deposited to the CENTRAL BANK OF WEST AFRICA Cotonou Benin Republic,for immediate wire transfer to your account as soon as you contact them. This Deposit was done through the help of our company Lawyer,Barrister Martins.Here is the Deposit Number,D56G/HKG/2016.Date of Deposit, 17th February 2016,Deposit Certificate Number,006781.Now you should contact the Central Bank with your Bank Data. Here is the Central Bank Contact Infos,

Plc,Plot:205 ABAKPA
TEL +229 982 223 88
FAX +229 93 642 241
REF:CB/102/BR0005B/2016
Email;cbn.paymmasterdesk@gmail.com

Contact Person,Dr Francis Ohin,Payout Manager.

After you contact this Bank then get back to me for more advise on how you will get this funds easly from the Bank.

God Bless you.

Sincerely Yours.

Mrs,Evelyn Udezuo
ASSISTANT LOTTO PROMOTION.

This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

Email analysis :

NOTE : cbn.paymmasterdesk@gmail.com
NOTE : mr.johnwalker@volny.cz
NOTE : Received : from mail.xpeedgroup.com ([122.102.35.242])