Wednesday, November 4, 2015

RE: RECENT SCAM VICTIM'S

Attention;

NOTE: If you received this message in your SPAM/BULK folder, it is because of the restrictions imposed by your Mail/Internet Service Provider, we urge you to treat it genuinely.

How are you today? Hope all is well with you and family? You may not understand why this email came to you.

In regards to the recent meeting between the United Nations and the United States Government to restore the dignity and Economy of Nations based on the Agreement with the World Bank Assistance Project to help and make the world a better place. We have been having meetings for the past 3 months with the Secretary General of the United Nations.

This email come to those who are yet to receive their compensation/inheritance/winnings and who have been scammed in any part of the world, this includes every foreign contractors that may have not received their contract sum, and people that have had an unfinished transaction or Compensation payments that failed due to Government problems etc. The UNITED NATIONS have agreed to compensate you with the sum of $2.7M USD (Two Million Seven Hundred Thousand United States Dollars).

100 Scam Victim people where selected across the Globe for the END OF THE YEAR COMPENSATION and Your name and email was in the list submitted by our Monitoring Team observers and this is why we are contacting you, this have been agreed upon and have been signed, so you are advised to contact Mr. Clem Odili of the United Nations Compensation Commission, as he is our representative in Benin Republic. Contact him immediately for your Compensation payment of $2.7M USD (Two Million Seven Hundred Thousand United States Dollars) which will be released directly to you in accordance with legal clearance and procedures.

However, you should send him your as below:

Full Name
your Residential Address
State
Country
Telephone Number
Gender
Date Of Birth:
Occupation.
Marital status
Copy Of Your Int'l Passport/Drivers License

Contact Mr. Clem Bates immediately for your compensation payment:

Mr. Clem Odili
Email: ( lein297@yahoo.com.vn )
Director- General,

He is obliged to give you a call and treat your case with utmost urgency as soon as you contact him and fill out your correct details including all reachable phone numbers for him to get in touch with you via phone and email lastly you will be requested to pay the sun of $200 for processing/administrative fee.

Here is your Winning Code: WIN8502014KMYV. Make sure you give him your winning code to confirm you as the right person.

Good luck and kind regards,
Making the world a better place!
Mrs. Uchenna Lord.

For more info on the UNCC, see:
http://www.uncc.ch/

Email analysis :

NOTE : officefiles010101@yahoo.fr
NOTE : marina@localhost
NOTE : lein297@yahoo.com.vn
NOTE : 172.16.1.12
NOTE : 93.63.249.12 (email.clstv.it)

Saturday, October 31, 2015

COLLABORATION

Good morning

I come by this e-mail to send my best greetings in first and then you have my excuses for this unexpected contact. But imagine with me that it is being given the urgency and the importance of this agreement. Indeed, I work with a group of miners of Ghana, which currently has a gold quantity which they want to sell immediately. It is approximately 89 kilos from a bar from gold, 22 carats+ in 28 000 dollars on a kilo. Moreover, I must say that we do not have yet the official documents with the gold export. Therefore, I come by this e-mail to contact you and to see whether you are interested in this product.

Hoping to have your news soon, please accept my best greetings.

Bidi NAA SARKU.

Bonjour

Je viens par ce mail pour envoyer mes salutations les meilleures en premier et ensuite vous avez mes excuses pour ce contact inattendu. Mais imaginez avec moi qu'il est étant donné l'urgence et l'importance de cet accord. En effet, je travaille avec un groupe de mineurs du Ghana, qui actuellement dispose d'une quantité d'or qu'ils veulent vendre immédiatement. C'est environ 89 kilos de Lingot d'or, 22 carats+ à 28 000 dollars par kilogramme. En outre, je dois dire que nous n'avons pas encore les documents officiels à l'exportation d'or. Donc, je viens par ce mail pour vous contacter et de voir si vous êtes intéressé à ce produit.

Espérant avoir de vos nouvelles bientôt, s'il vous plaît acceptez mes salutations les meilleures.

Bidi NAA SARKU.

Email analysis :

NOTE : bidi.naasarku@gmail.com
NOTE : Return-Path : < cuongtq.qld@moh.gov.vn >
NOTE : X-Originating-Ip : [41.86.234.165]
NOTE : X-Virus-Scanned : amavisd-new at moh.gov.vn
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Mailer : Zimbra 8.0.6_GA_5922 (zclient/8.0.6_GA_5922)
NOTE : Thread-Topic : COLLABORATION
NOTE : Message-Id : < *.*.*.JavaMail.zimbra@moh.gov.vn >
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Received : from unknown (HELO mail.moh.gov.vn) (103.1.210.45)
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from mail.moh.gov.vn (mail.moh.gov.vn [103.1.210.45])
NOTE : by mail.moh.gov.vn (Postfix)

Analysis of the scam :

The server from Vietnamese Ministry of Health seems compromised. The server from the Vietnamese Ministry of Health relays the scam from 41.86.234.165. The user cuongtq.qld is the compromised account.