Monday, November 9, 2015

The Board of federal ministry of finance benin republic

Dear Beneficiary:

The Board of federal ministry of finance benin republic. are here to notify you of your payment inherited funds of $2.5M.000. after the meeting held on 12th of oct 2015. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYI BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global. you are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $69 dollar for re-newing and recofirming your file that was deposited in this office with your name and address bellow.

Beneficiary name-------------
Address-------------
Tel phone-----------

Contact with this informations below:
CONTACT PERSON: MR PAUL JAMES
Telephone: +229-68557062

EMAIL: As soon as the required fee of $69 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.Send the $69 dollar through western union with the name and address below:

Here the information,

Country:........Republic of Benin
City:.......Cotonou
Receivers Name:.........ikem frank
Text:...............in
Answer:................God
Amount:..........$69

We await to receive the western union payment informations today.Please if you are not the real beneficiary don't respond on this,Call MR PAUL JAMES on this number 00229-68557062 for him to know that you have contacted him with your information's.

Yours in service

mr john aka
Finance Ministery
Federal republic of Benin.

Email analysis :

NOTE : AKA@trust.ocn.ne.jp
NOTE : western-union-@outlook.com
NOTE : Received : from mzcstore252.ocn.ad.jp (mv-osn-hkg002 [122.28.30.180])
NOTE : by mv-osn-hkg002.ocn.ad.jp (Postfix)
NOTE : X-Originating-Ip : [41.86.234.165]

Monday, November 2, 2015

The Board of federal ministry of finance benin republic

Dear Beneficiary:

The Board of federal ministry of finance benin republic. are here to notify you of your payment inherited funds of $2.5M.000. after the meeting held on 12th of oct 2015. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYI BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global. you are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $69 dollar for re-newing and recofirming your file that was deposited in this office with your name and address bellow.

Beneficiary name-------------
Address-------------
Tel phone-----------

Contact with this informations below:
CONTACT PERSON: MR PAUL JAMES
Telephone: +229-68557062
EMAIL: As soon as the required fee of $69 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.Send the $69 dollar through western union with the name and address below:

Here the information,

Country:........Republic of Benin
City:.......Cotonou
Receivers Name:.........ikem frank
Text:...............in
Answer:................God
Amount:..........$69

We await to receive the western union payment informations today.Please if you are not the real beneficiary don't respond on this,Call MR PAUL JAMES on this number 00229-68557062 for him to know that you have contacted him with your information's.

Yours in service

mr john aka
Finance Ministery
Federal republic of Benin.

Email analysis :

NOTE : WWW@trust.ocn.ne.jp
NOTE : wester.m.transfer@gmail.com
NOTE : X-Originating-Ip : [41.86.234.165]


NOTE : X-Remote : 153.149.233.4 (mbkd0203.ocn.ad.jp)


NOTE : Content-Transfer-Encoding : 7bit
NOTE : Received : from mf-smf-ucb017.ocn.ad.jp
NOTE : (mf-smf-ucb017.ocn.ad.jp [153.149.227.66])


NOTE : by mbkd0203.ocn.ad.jp
NOTE : Received : from mv-osn-hkg002.ocn.ad.jp (mv-osn-hkg002.ocn.ad.jp [122.28.30.180])


NOTE : by mf-smf-ucb017.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4)
NOTE : Received : from mzcstore252.ocn.ad.jp (mv-osn-hkg002 [122.28.30.180])


NOTE : by mv-osn-hkg002.ocn.ad.jp (Postfix)
NOTE : The Board of federal ministry of finance benin republic

Saturday, October 31, 2015

COLLABORATION

Good morning

I come by this e-mail to send my best greetings in first and then you have my excuses for this unexpected contact. But imagine with me that it is being given the urgency and the importance of this agreement. Indeed, I work with a group of miners of Ghana, which currently has a gold quantity which they want to sell immediately. It is approximately 89 kilos from a bar from gold, 22 carats+ in 28 000 dollars on a kilo. Moreover, I must say that we do not have yet the official documents with the gold export. Therefore, I come by this e-mail to contact you and to see whether you are interested in this product.

Hoping to have your news soon, please accept my best greetings.

Bidi NAA SARKU.

Bonjour

Je viens par ce mail pour envoyer mes salutations les meilleures en premier et ensuite vous avez mes excuses pour ce contact inattendu. Mais imaginez avec moi qu'il est étant donné l'urgence et l'importance de cet accord. En effet, je travaille avec un groupe de mineurs du Ghana, qui actuellement dispose d'une quantité d'or qu'ils veulent vendre immédiatement. C'est environ 89 kilos de Lingot d'or, 22 carats+ à 28 000 dollars par kilogramme. En outre, je dois dire que nous n'avons pas encore les documents officiels à l'exportation d'or. Donc, je viens par ce mail pour vous contacter et de voir si vous êtes intéressé à ce produit.

Espérant avoir de vos nouvelles bientôt, s'il vous plaît acceptez mes salutations les meilleures.

Bidi NAA SARKU.

Email analysis :

NOTE : bidi.naasarku@gmail.com
NOTE : Return-Path : < cuongtq.qld@moh.gov.vn >
NOTE : X-Originating-Ip : [41.86.234.165]
NOTE : X-Virus-Scanned : amavisd-new at moh.gov.vn
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Mailer : Zimbra 8.0.6_GA_5922 (zclient/8.0.6_GA_5922)
NOTE : Thread-Topic : COLLABORATION
NOTE : Message-Id : < *.*.*.JavaMail.zimbra@moh.gov.vn >
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Received : from unknown (HELO mail.moh.gov.vn) (103.1.210.45)
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from mail.moh.gov.vn (mail.moh.gov.vn [103.1.210.45])
NOTE : by mail.moh.gov.vn (Postfix)

Analysis of the scam :

The server from Vietnamese Ministry of Health seems compromised. The server from the Vietnamese Ministry of Health relays the scam from 41.86.234.165. The user cuongtq.qld is the compromised account.