From: philip <jerryhenry01@ucusman.com>
Reply: philip <mrphiliplawrence@hotmail.com>
Date: Wed, 22 Feb 2017 09:38:46 +0000 (UTC)
Subject: Congratulation my dear your mail have won prize.
open your attach file
From: Chika Adams <chikaadams11@gmail.com>
Date: Fri, 17 Feb 2017 12:02:36 +0000
Subject: TO
[image: Inline image 1]
From: FROM DIVISION OF YAHOO CENTRE <edfsgd2874j@gmail.com>
Reply: FROM DIVISION OF YAHOO CENTRE <frankmayo@yahoo.co.za>
Date: Mon, 13 Feb 2017 07:47:08 +0000 (UTC)
Subject: Please Check Your Attachment File
From: Hanlon M Landry <hland21@lsu.edu>
Date: Tue, 7 Feb 2017 23:49:17 +0000
Subject: Monica Mail Attached (READ)
From: Ecosoc <ecosoc2017@yandex.com>
Reply: Ecosoc <atm.dept2017@yandex.com>
Date: Tue, 7 Feb 2017 16:33:00 +0000 (UTC)
Subject: IRREVOCABLE PAYMENT ORDER
ECONOMIC AND SOCIAL COUNCIL ATTACHMENT IS COPY OF YOUR FUND APPROVAL NOTICE.
From: <j.mensah53@yahoo.com>
Reply: <j.mensah53@yahoo.com>
Date: Mon, 6 Feb 2017 14:31:48 +0000 (UTC)
Subject: SALES OF Gold Bars (AU) Rough Diamonds Scrap Metals HMS 1&2 and Copper Available
 Greetings Dear sir/Madam,
we are in possession of a large quantity of Gold Bars (AU), Emaralds, Â Rough Uncut Diamonds, SCRAP METAL HMS 1&2 and Copper Cathode Electrolytic Grade A which we want to sale to any capable buyer.
We are a well-known Mining Company here in Ghana. Some of the small scale miners do bring their products to us to sale to any good and financially capable buyers alike. I wish to draw to your attention that presently, we are in possession of a large quantity of Gold Bars (AU), which we want to sale to any capable buyer.We correctly have 550 KGs of Gold Bars to be shipped to any Buyers destination and have the capacity to make a contractual monthly delivery with a reliable Buyer or entity, our mining activities are not limited to Gold (AU) but also Rough Uncut Diamonds of Gem Quality.
⢠Product Description⢠Gold Bars (AU)⢠Purity: 96.5%⢠Carats: 22+⢠Price: negotiable⢠Origin: Ghana⢠Quantity: To be agreed (300kg and above monthly)⢠Should You have interest in buying, please feel free to contact me below.
 due to the fact that itâs a must for a buyer to pay for Shipping Cost, Custom Documentation, Government Tax, Insurance and other Logistics to enable the gold be shipped out of Ghana to buyerâs destination, we donât trade based on 100% CIF as this cost are buyerâs responsibilities.Please, should you be interested to working with us by providing a good buyer or could personally buy, kindly revert back to us. Attached below is our Full Co-operate Offer (FCO).
Should You have interest or direct Buyers, kindly contact me for further details BelowFOR MORE INQUIRIES: : (Adjeikennedy15@yahoo.com) Â +233237834176
From: "UN Development Group"<danny13@skpnet.nl>
Reply: <undp.grantclaim@gmail.com>
Date: Fri, 3 Feb 2017 22:33:59 -0800
Subject: Your Grant Notce
ORG/1872/123/Empowermentgrant-1617 February 2017
Grant Beneficiary,
Batch no.EU/GB/98000111100012-151-1
Reference no.UNDP/RP/0023-30241E
Verification code: GB-UNDP-07/13
RE; UNITED NATIONS-UNDP JOINT PROGRAMME ON EMPOWERING ENTREPENEURS AND CAREER PROFESSIONALS IN LOCAL COMMUNITIES.
Dear Grant Beneficiary,
I am emailing you on behalf of the United Nations Development Group. Find attached to this e-mail your notice of grant.
Sincerely,
Jordan Ryan
Head Co-ordinator
UN Development Group
405 East 42nd Street,
New York, NY, 10017, USA
Tel.:+1 (917) 768 6444
Email:undp.grantclaim@gmail.com
Confidentiality Notice: This communication constitutes an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. Section 2510, and its disclosure is strictly limited to the recipient intended by the sender of this message. This transmission and any attachments, may contain privileged and confidential information and is subject to professional secrecy (e.g., of International grant notice, financial statements or legal advisor). If you are not the intended recipient, please contact the sender and destroy all copies of the original message without reading or saving in any manner. Failure to comply in any way will result in legal action pursuant to all local and federal laws of origin.
From: "ELIGIBLE REWARD:FROM COCA-COLA CENTRE" <webcolacentre15@outlook.com>
Reply: "ELIGIBLE REWARD:FROM COCA-COLA CENTRE" <webcolacentre@outlook.com>
Date: Thu, 2 Feb 2017 08:48:49 +0000 (UTC)
Subject: GLOBAL REWARD :CONGRATULATIONS!
Good-Day,
Kindly find attached the detailed brochure for you perusal,
complete the form on the last page of the attachment and send it back to me.
Best Regards
From: Dr Anderson Phillip <polowaskystinner11@gmail.com>
Reply: Dr Anderson Phillip <phillipandy56@gmail.com>
Date: Wed, 1 Feb 2017 15:13:11 +0000 (UTC)
Subject: YOUR ATM VISA CARD
From: Anthony <amos896467576@gmail.com>
Reply: Anthony <canadalott28564@gmail.com>
Date: Tue, 31 Jan 2017 18:57:07 +0000 (UTC)
Subject: CANADA LOTTERY
From: "Mr. Ernesto Diaz Bastien,"<breves@jucepa.pa.gov.br>
Reply: <bastiendiaze@gmail.com>
Date: Sat, 28 Jan 2017 00:01:05 +0100
Subject: Mutual Benefit
Dear.Sir / Madam,
I am Mr. Ernesto Diaz Bastien, an Attorney/Solicitor, working with Torres Chambers in Spain. I got your detailed contact Email Address through public archive, while searching for any possible relative to my late client,whom he left the sum of $7,500,000.00 (Seven Million Five Hundred Thousand Euros Only) with a security and investment company here in Spain. Do contact me either via email, fax or telephone for further discussions. Lastly, owing to the sensitivity of this transaction I urge you to keep this proposal in utmost confidentiality pending our discussion. Telephone Number:+34 631 716 797. Email:bastiendiaze@gmail.com
kindly send the details as stated below to enable me forward same to the safe keeping company where the deposited consignment will be re-profiled to your name as the new beneficiary:
{1.} Name…………
{2.} Country ……….
{3.} Address …….
{4.} Age…….
{5.}Fax number…….
{6.} Personal Number….
{7.} Occupation…………
Best Regards,
Mr. Ernesto Diaz Bastien,
Email:bastiendiaze@gmail.com
Telephone:+34 631 716 797.
—
Esta mensagem foi verificada pelo sistema de antivÃrus e
acredita-se estar livre de perigo.
From: peter lawrence <pete_lawrence@outlook.com>
Date: Wed, 25 Jan 2017 01:28:15 +0000
Subject:
Good Day,
This message is to notify you that late Mr. Allen Brent includes you among his heir apparent. Open the attached file for more clarification and email me back to proceed.
Regards,
Peter Lawrence.
From: "True Move Company Ltd Thailand"<noreply@googlemail.com>
Reply: <truemovelimited@gmail.com>
Date: Tue, 17 Jan 2017 14:22:28 +0700
Subject: True Move Company Ltd Thailand
True Move Company Ltd Thailand
Headquarters, 18 True Tower Building, Ratchadaphisak Road Huai Khwang
Bangkok.
Winner Notification!! Contact:
truemovecompanylimited@gmail.com
RegardsÂ
From: Mrs Jendayi Elizabeth Frazer <plno@gmx.us>
Reply: Mrs Jendayi Elizabeth Frazer <jendayiefrazer@gmail.com>
Date: Sat, 14 Jan 2017 16:25:04 +0000 (UTC)
Subject: Your Entitlement Fund
Attn; Beneficiary,
I am Mrs Jendayi Elizabeth Frazer, Former U.S.A Ambassador to South Africa.
With reference to your entitlement fund and in line with the CHANGE OF BENEFICIARY'S APPLICATION.
Kindly open my attached letter to read more about your entitlement fund.
From: Nicole Adams <nadams784@essvvell.com>
Reply: Nicole Adams <adamsnicoledept11@outlook.com>
Date: Wed, 11 Jan 2017 19:36:53 +0000 (UTC)
Subject: From Nicole Adams
VIEW THE ATTACHMENT DOCUMENTS I SENT TO YOU FOR DETAILS.
REGARDS.
NICOLE ADAMS.
Technical Analysis
The PDF attachment was flagged as suspicious by VirusTotal
From: EDMOND MANDISA <edmandisa2010@gmail.com>
Reply: EDMOND MANDISA <edmandisa2@gmail.com>
Date: Sat, 7 Jan 2017 18:08:33 +0000 (UTC)
Subject: FROM EDMOND MANDISA VERY URGENT BUSINESS PROPOSAL (PLS OPEN FILE)
FROM: MR. EDMOND MANDISA
SOUTH AFRICA JOHANESBURG
TEL; +27 735227845
Email; edmandisa2@gmail.com,
Dear; Sir/Madam,
Good day! My name is Mr. EDMOND MANDISA the Chief Auditor of First National Bank South Africa Johannesburg, There is an account opened in this bank in 1980 and since 1990 nobody has operated on this account again. After going through some old files in the records, I discovered that if I do not remit this money out urgently it would be forfeited.
However, the owner of this account is Mr. Andreas B. Philip, a foreigner and a Miner in a Gold Mining Company. A Geologist by profession who died in 1990. No one knows about this account, transaction or anything concerning it, this account has no other beneficiary and the investigation proves to me as well that his company does not know anything about this account and the amount involve in the account at the moment is US$20,000,000.00 (Twenty Million United State Dollars) Therefore, I need a foreign partner/account to transfer the money overseas that is the reason why I am contacting you. Please kindly indicate your interest and contact me immediately on the above phone numbers to enable me inform you on next step to take.
I need your full co-operation to make this transaction work because the management is ready to approve this payment to any foreigner who has correct information on this account, which I will give you if you indicate your interest. I hope you can be able to handle this transaction and the amount involve in strict confidence because this opportunity will never come again in our life. I need truthful person in this business relationship because I don’t want to make any mistake. I need your strong assurance and confidentiality in this business.
At the conclusion of this business you will be given 40% of the total amount 60% will be for me, it will be use for investment in your country under your care and supervision. I have put in place all the necessary requirements concerning the release of this funds and it is my intention to introduce this opportunity to you as the next of kin to make the transaction and approval very much easier. Please note that I’m legally equipped with all necessary information/documentations concerning this fund. Upon your decision of acceptance, I would process the release of these funds to your possession as the beneficiary immediately you get in touch with me. I should be able to inform you on how this could be achieved and concluded as soon as possible in my next communication to you. In conclusion once again, it’s my concern to demand your ultimate honesty, co-operation and confidentiality to enable us conclude this transaction.
I GUARANTEE that this process would be executed under a legitimate arrangement that would legally protect you from any breach of the law if need be.
Regards,
MR. EDMOND MANDISA
(Chief Auditor First National Bank)
From: James SLOT <catherinevallet1955@gmail.com>
Reply: jamesslottg2020@yahoo.com
Date: Fri, 6 Jan 2017 16:17:55 +0000
Subject: Hello Dear,
Download and Read my Attachments message
Dear Friend,
My name is Dr James SLOT; I am the Chief Accountant of (NNPC) and Chairman Tender Board of Contract Awarded Committee (CAC).
I got your contact in my private search for a reliable person to handle a very confidential transaction involving the transfer of €857.8 Million Euros. Contractor (Dale Reece) the original contractor has sent me the copy of the funds deposited in a bank in Belgium the sum of €857.8 Million Euros; all I need is your trust, honest, transparency both in spirit and in business.
The above fund is not connected with arms, Drugs or Money laundering. It is the product of an over Invoiced Contract Awarded in 2006 by CAC to a Foreign Contractor for the Construction of West African Pipe Line Project. Also West Africa Monetary Agency in Nigeria has approved the payment.
The contract has long been executed and payment of the actual contract amount has been paid to the Foreign Contractor Account in Belgium and left behind is our over Invoiced, which myself and my colleague now want you to come in as the Foreign Beneficiary and claim the fund out of the present bank into a reliable foreign account of your choice for investment in your country.
s a civil servant we are not allowed to run Foreign Accounts. Hence we have chosen to bring you as the Foreign Beneficiary to be paid since you are a foreigner from another country that make everything very easy for you to receive the funds in your choice account. It is a very good thing that the present President has endorsed the resolution passed by the pass regime minister, that all Foreign Contractors Owed by Government should be paid; we now seized this good opportunity to bring you in as the Foreign Contractor/Beneficiary to travel to the Bank in Belgium in person on our behalf to claim the entire funds immediately.
We have decided to share the fund in the following percentage, 60% for us 35% for you as the Account Owner and 5% for all local and international expenses that may arise in the course of this transaction. Further details about this transaction will be discussed in the subsequent correspondence. Note also that the particular nature of your business is irrelevant to this transaction and all Local Contacts and Arrangements are in place for a smooth and successful conclusion of this transaction.
You have nothing to fear or worry about as we are going to guide you in all aspects and as soon as you travel to the Belgium Bank in person to see the funds and witness everything yourself, all the funds will be converted and transferred through you into your bank account that can accommodate the entire funds as the Foreign Contractor to be paid directly you presence at the Belgium Bank will be highly respected.
If you, your company and your committee are interested in this proposal kindly send us your details such as your Full name, Home Address, Office Address, Private Cell numbers, Occupation and Marital Status, so that I can furnish you with more details of the transaction.
Thank you in advance as I await your urgent response. Contact me via my private email on: jamesslottg2020@yahoo.com
Yours Sincerely,
Dr. James SLOT.
From: "FedEx Delivery Service" <rfernandez@intertelcosv.com>
Reply: fdx41@outlook.in
Date: Mon, 02 Jan 2017 14:36:35 +0530
Subject: @We Have A Delivery For You
See Attached File
Technical Analysis
This attachment contained a trojan 
The document details were interesting, in a way. Created on a Dell in 2014, recently modified (2016) on an Apple.
| creator | dell |
| lastModifiedBy | apple |
| revision | 37 |
| lastPrinted | 2016-03-11T18:43:00Z |
| created | 2014-04-07T14:09:00Z |
| modified | 2016-04-24T15:33:00Z |
From: Yahoo <rossweavera@centurytel.net>
Date: Mon, 2 Jan 2017 01:18:01 -0500 (EST)
Subject: Email
find attachment
From: Rico <marydonatus1@gmail.com>
Reply: sabimarvel@yahoo.com
Date: Wed, 21 Dec 2016 13:18:11 -0800 (PST)
Subject: FWD: :NO SUBJECT
Technical Analysis
All this had was a small image of a purchase order. This image you see is the best it gets. The Email have a clickable link which probably went off to a dodgy script.
From: "US Bank-E-payment-Online"<online.communication@account.com>
Date: 19 Dec 2016 18:34:45 -0500
Subject: E-payment Transfer Notification From Another US Bank Customer
Technical Analysis
This one was being sneaky! Noting dodgy within the Email. The PDF scans clean for viruses, but open the PDF, and there is a tempting link to click on. You can see it in the image above – note that our image is not clickable. With an Email, you are able to hover above a link and see where it is going. The PDF is not like that by default.
In this case, I was able to interrogate the link, and it shoots off to a website for a bakery. It is unusual to find a bakery hosting web pages on behalf of a bank, so my suspicions were aroused! The reality is that the bakery would have been hacked, and a rogue webpage created to either collect data or plant trojans.
From: "MAHMOUD, AHMED A" <amahmoud@email.sc.edu>
Date: Tue, 6 Dec 2016 16:38:01 +0000
Subject: Winner!
From: From Division of Yahoo Centre <inc01ko1@hotmail.com>
Reply: From Division of Yahoo Centre <safrankmayo@gmail.com>
Date: Tue, 6 Dec 2016 10:28:00 +0000 (UTC)
Subject: Payment Approved,
“Attached are the details”
From: JAMES A <2top201a@gmail.com>
Date: Tue, 22 Nov 2016 11:24:05 +0100
Subject: YOUR CLAIM
[image: Images intégrées 1]
From: PAYMENT NOTIFICATION <paymentnotification06@gmail.com>
Reply: PAYMENT NOTIFICATION <philipmorgan-boa@accountant.com>
Date: Mon, 21 Nov 2016 13:04:56 +0000 (UTC)
Subject: NOTIFICATION
Attn;kindly open the attache file
