Tag: png

HM Revenue Customs Your overpaid tax is available for refund

From: HM Revenue & Customs <info@lifeteen.com>
Date: 01 Oct 2017 04:25:06 +0100
Subject: Your overpaid tax is available for refund

Attachments

  • 300px-hmrevenueandcustoms(uk)(-2013).svg.png
  • horizontal-title-delimiter-email-grey.png

JUST ONE MORE STEP…

YOU ARE ELIGIBLE FOR 265.84 TAX REFUND AND IS AVAILABLE FOR DIRECT
DEPOSIT. CLICK THE BUTTON BELOW TO COMPLETE YOUR CLAIM.

Please ignore this email if you are not *******@brendinghat.com.

Aisha Al-Qaddafi Subj: Please Dear I need your help to invest in…

From: Aisha Al-Qaddafi <hhggg.gghhh@aol.de>
Date: Wed, 30 Aug 2017 08:27:00 -0400
Subject: Subj: Please Dear !, I need your help to invest in...

Subj: Please Dear !, I need your help to invest in your country, Por favor Estimado !, Necesito su ayuda para invertir en su pas

Assalamu Alaikum Wa Rahmatullahi Wa Barakatuh,

Dear Friend,
I came across your e-mail contact prior a private search while in need of your assistance. My name is Aisha Al-Qaddafi a single Mother and a Widow with three Children. I am the only biological Daughter of late Libyan President (Late Colonel Muammar Gaddafi).

For more details, please contact me with this my private email address aishaqaddafi100000@gmail.com

I have investment funds worth Twenty Seven Million Five Hundred Thousand United State Dollar ($27.500.000.00 ) and i need a trusted investment Manager/Partner because of my current refugee status, however, I am interested in you for investment project assistance in your country, may be from there, we can build business relationship in the nearest future.

I am willing to negotiate investment/business profit sharing ratio with you base on the future investment earning profits.

For more details, please contact me with this my private email address aishaqaddafi100000@gmail.com

If you are willing to handle this project on my behalf kindly reply urgent to enable me provide you more information about the investment funds.

Your Urgent Reply Will Be Appreciated

Best Regards
Mrs Aisha Al-Qaddafi
=============================================================
Assalamu Alaikum Wa Rahmatullahi Wa Barakatuh,

Querido amigo,
Me encontr con su contacto de correo electrnico antes de una bsqueda privada, mientras que en la necesidad de su ayuda. Mi nombre es Aisha Al-Qaddafi una madre soltera y una viuda con tres hijos. Soy la nica hija biolgica del ltimo presidente libio (coronel tardo Muammar Gaddafi).

Para ms detalles, pngase en contacto conmigo con esta mi direccin de correo electrnico privada aishaqaddafi100000@gmail.com

Tengo fondos de inversin por valor de Veintisiete Mil Millones Cincocientos Dlares Estadounidenses ($ 27.500.000.00) y necesito un Gerente / Socio de Inversin de confianza debido a mi condicin actual de refugiado, sin embargo, estoy interesado en usted para la asistencia de proyectos de inversin en su pas, Puede ser de all, podemos construir una relacin comercial en el futuro ms cercano.

Estoy dispuesto a negociar la relacin de participacin de inversin de inversin / negocio con usted base en la inversin futura que gana beneficios.

Para ms detalles, pngase en contacto conmigo con esta mi direccin de correo electrnico privada aishaqaddafi100000@gmail.com

Si est dispuesto a manejar este proyecto en mi nombre amablemente responder urgente para permitirme proporcionarle ms informacin sobre los fondos de inversin.

Su respuesta urgente ser apreciada

Atentamente
Sra. Aisha Al-Qaddafi

The Email contained an excessively large subject. For aesthethic reasons we have truncated the message in the title and reproduce the full subject below.

Subj: Please Dear !, I need your help to invest in your country, Por favor Estimado !, Necesito su ayuda para invertir en su pas

Jirachot Phansa RE: VERY URGENT

From: Jirachot Phansa <jirachop@scg.com>
Date: Sat, 19 Aug 2017 12:10:19 +0000
Subject: RE: VERY URGENT

I have an urgent business proposal for you, Please contact my private
Gmail:MRSHUANGEN2@GMAIL.COM

Await Your Response,

Mrs Huan Gen.

Tengo una propuesta de negocio urgente para usted, pngase en
contacto con mi Gmail privado:MRSHUANGEN2@GMAIL.COM

Espero tu respuesta,

Sra. Huan Gen.

————————-
SCG website & email will be changed to scg.com on 1 August 2017.
This e-mail contains legally protected intellectual property right and
confidential information. If you are not the intended recipient,
please immediately delete this e-mail from your system and notify the
sender. Any unauthorized usage of this e-mail may be subject to
available legal proceeding. This e-mail may contain personal opinion
of the author or information that does not relate to the business of
The Siam Cement Plc., its affiliates and associates (“SCG”) for which
SCG shall not be liable. It is advisable that all e-mail be scanned by
reliable virus protection software. SCG bears no responsibility for
any damage possibly incurred by this e-mail.

Mr.PHILIPPE LE HOUEROU OFERTA pr stamo y financiaci n de

From: "Mr.PHILIPPE LE HOUEROU"<mail@taubenweder.com>
Reply: ifcinvestmentsgroups@gmail.com
Date: Thu, 03 Aug 2017 14:42:15 -0700
Subject: OFERTA pr�stamo y financiaci�n de

Somos una empresa de consultoría financiera en nuestra cartera con grupos de inversores que sean capaces de ofrecer préstamos y financiación para proyectos cuya rentabilidad
es cierto a corto, medio o largo plazo en varias áreas tales como: Agroindustria,
Bienes inmuebles (industrial, comercial y residencial), el turismo y el comercio en el hotel, Minería y explotación de petróleo,
pequeña y mediana industria, transporte (carretera, marítimo y aéreo), energías renovables,
Importación y exportación, las nuevas tecnologías, la agricultura, etc …..

Si tiene alguna tiros interesantes (en las ramas de la industria mencionados anteriormente o en otros sectores
actividades), por favor, póngase en contacto con nosotros: www.ifccinvestmentsgroup.com

Mail Server Perfect one

From: Mail Server <hiva_hoseini@yahoo.com>
Reply: Mail Server <hiva_hoseini@yahoo.com>
Date: Sun, 2 Jul 2017 06:48:31 +0000 (UTC)
Subject: Perfect one

Attachments

  • 532.jpg

What I am seeking is a woman as laid out in Proverbs 31. A woman who is
strong (but not overbearing), loyal, respectful, kind and sweet. That
carry herself like the Queen she is in all situations. That arouse my
intellect as well as physical desires. Looking for  that somebody that I
can share my entire self with. Somebody that is not afraid to be loved
as well express love .. I seek for a serious and long term
relationship,Someone I can spend the rest of my Life with. Well I will
like to tell> u that am a sensitive man, am honest, Kind,caring, and truthful .. I
Love reading, Singing, Watching tv, going to beach, Sports,Swimming,
Outdoors, Camping,and Fishing .. My turn on is someone who is
Honest,truthful,friendly and someone who can make me happy, My turn off
is : I don't like someone who lies,someone that love talking dirty
online,someone who is just looking for a sex online..So far so good i
must confess that i can definitely love a good woman till the end of my
Life…………….honey it took me time to write these to you ..pls kindly reply back..too

Caravan Camper Megastore Midland Financial Advice

From: Caravan & Camper Megastore Midland <admin@travellerrv.com.au>
Date: Mon, 5 Jun 2017 16:13:03 +0000
Subject: Financial Advice

Attachments

  • Financial Advice 2345555.pdf

Hello

Please find attached the Financial advice document for your review.

Let me know if you need any further assistance

Kind Regards

Technical Analysis

The attachment is flagged as suspicious by VirusTotal

This is a relatively new trick. When you open the PDF, you are presented with a login screen. After entering your login and password, you get to see the PDF. Meanwhile your details are forwarded to the hacker.

MINISTERIO DE HACIENDA Y ADMIN P BLICAS

From: <loteriapuestas.es@gmail.com>
Reply: mapfreseguroservicio@gmail.com
Date: Tue, 30 May 2017 01:12:29 +0200
Subject: MINISTERIO DE HACIENDA Y ADMIN P�BLICAS

MINISTERIO DE HACIENDA Y ADMIN PÚBLICAS

Pº. De la Castellana, 162. 28046-Madrid
Departimiento de aprobación del premio no reclamado
Tel Oficina : +34-605-325369
Fecha: 29/05/2017

Ref/ ES/100/ESP

Atén: Beneficiario
Aprobación de pago

El ministerio desean para informarle sobre el lanzamiento de la 1CPROGRAMA INTERNACIONAL ELGORDO PREMIO 1D, celebrado en el 13 de Mayo de 2017, los resultados fueron puestos en libertad en el 27 de Mayo de 2017. Su correo electrónico fue introducido como un cliente dependiente con el número de referencia: UBLES / 100 / ESP y el número de lote: 80076, Su número de boleto: 317,2, con número de serie: 53401-64 dibujó los números de la suerte: 05-08-10-13-14-22.

Esto posteriormente ganó la lotería en la categoría 1ª. por lo tanto, que haya sido aprobado por un pago único de ( AC 19,090,909.00) acreditado al número de archivo; 2212/20914/2017. Esto es de un premio en metálico total de ( AC 210,000,000.00) repartirá entre los once ganadores internacionales de la misma categoría. ¡¡¡¡¡¡¡Felicitaciones!!!!!!!

Todos los participantes fueron seleccionados a través de un sistema de votación electrónico extraída de 31.000.000 nombres y correos electrónicos de, Asia, Europa, América del Sur y del Norte como parte de nuestro programa de promociones internacionales que hacemos llevan a cabo una vez al año. Esperamos que su nombre de suerte dibujará un premio en efectivo más grande en los programas posteriores por delante.

Su fondo es temporalmente depositados y protegidos con una cobertura de póliza de seguro en su nombre en un banco español en España, y debido a las prácticas irregulares de algunos elementos sin escrúpulos, se recomienda que mantenga este premio estrictamente fuera de aviso público hasta que su premio ha sido procesado y sus fondos remitidos a usted a través de cualquier medio de su elección, ya que es parte de nuestras medidas de seguridad para evitar la doble reivindicación.

Póngase en contacto con su abogado de reclamo, Pedro Blanco Garcia, el abogado de operaciones de extranjero de la empresa MAPFRE SEGUROS S.A, en el teléfono: +34-665 442 070 y Fax: +34 911 235 750. Correo electrónico: mapfresegurosinfo@gmail.com para procesar y reclamar su premio inmediatamente. Su premio debe ser reclamado antes del 17 de Junio de 2017, después de lo cual cada fondos no reclamados serán devueltos al Ministerio de la Economía y Hacienda como fondos no reclamados.

También se informó que el 5% (cinco por ciento) de su fondo ganador ha de paga a MAPFRE SEGUROS S.A para servir y que le representa en España, tendrá que pagar ellos el 5% (cinco por ciento) después de haber recibido su premio en metálico porque, el fondo fue asegurado en su nombre. Enhorabuena una vez más, en nombre de nuestro personal..

Contraloría General
Hernández Martha Agüela

Atención, por favor traducir personalmente a su idioma para poder entender el contenido, y ponerse en contacto con su abogado Pedro Blanco Garcia ahora. Gracias.

Este mensaje (y sus anexos) contiene información confidencial ido a un destinatario y objetivo específico, que está protegido por la ley. Le informamos que si no es el destinatario de la misma dirección, deberá eliminar este mensaje y permanecer estrictamente prohibido cualquier publicación, copia o distribución de su contenido y desarrollar o ejecutar cualquier acción basada en ella. Si usted es el destinatario, el uso de la información que recibe, debe ser limitada al objetivo específico para el cual fue enviado.

kariston vicente Pr stamos e inversiones Loan and investment

From: kariston vicente <karistonvicente6@hotmail.com>
Date: Fri, 26 May 2017 12:37:56 +0000
Subject: Pr�stamos e inversiones, Loan and investment

Hola

Le ofrecemos la posibilidad de empezar de nuevo sobre bases nuevas y una situación financiera más sereno ! Con nuestro préstamo de liquidez, ofrecemos a obtener toda su deuda (línea de crédito, préstamos personales, préstamos de automóviles, facturas de varios, de la familia de las deudas o de inversión ) y por la misma razón, si usted lo necesita, pregunte por el suplementario de dinero en efectivo. Con nosotros es como si usted puede las puertas de todos los bancos en el mismo tiempo ! Las herramientas de nuestra comparaciones de trabajo para usted !

Analizamos su situación y sus necesidades con el fin de proporcionar la mejor solución en el mercado ! Beneficiarse de la experiencia de los asesores, el mejor equipado. Está a su disposición para ayudarle en sus esfuerzos de listo préstamo personal de trabajo, consolidación de préstamos, el crédito del propietario, etc

Capacidad: 5.000 $ a 50.000.000 $

Para más información por favor póngase en contacto conmigo.

………………………………………………………………………………………………………………………………………………………………………..
Hello

We offer you the possibility to start again on new bases and greater financial serene !
With our loan liquidity, We offer you to gather all your debt (line of credit, personal loan, car loans, bills various, family's debts or investment ) and by the same token, if you need it, ask for the supplemental cash. With us it is as if you can the doors of all banks at the same time ! The tools of our comparisons work for you !

We analyze your situation and your needs in order to provide you with the best solution on the market !
Benefit from the expertise of the advisors, the better equipped. It is at your disposal to help you in your efforts of personal loan, loan to work, consolidation of loans, credit owner, etc

Ability: 5.000 $ to 50.000.000 $

For more info please contact me.

Solicitor CHARLES THOMAS MUNGER buffet Attorney Your Charity fund 200.000USD approved by Mr Warren Buffet is ready for cashing

From: Solicitor CHARLES THOMAS MUNGER buffet Attorney <scrap.dept@live.com>
Date: Sat, 6 May 2017 15:49:17 +0000
Subject: Your Charity fund $200.000USD approved by Mr Warren Buffet is ready for cashing

Attachments

  • Barr charles Munger Berkshire Hathaway’s ID Card pdf.pdf
  • Barr Charles Munger id card.jpg
  • Charles and Buffet.jpg

Dear Beneficiary,
I write to inform you that resolution was made yesterday during the Grant funding meeting held at Mr Warren Buffet’s Berkshire Hathaway’s omaha office herein USA.

Accordingly all the fund beneficiary are required to present their membership card to enable our account manager issue cashier check to you.

As official procedure demands you will provide your ID card within seven workings days to enable us dispatch your check.

Urgent and prompts responses is needed

Open attarch file to view idenefication for legitimate purposes

Your in service
Barr Charles Thomas Munger

American Express Suspicious sign in detected from unknown browser

From: "American Express" <service@efox-shop.com>
Date: Mon, 10 Apr 2017 13:50:51 -0700
Subject: Suspicious sign in detected from unknown browser

Dear American Express Customer:
We detected something unusual about a recent sign-in to the American Express.
To help keep you safe, we required an extra security challenge.
If you’re not sure this was you, a malicious user might have your password. Please review your recent activity and we’ll help you take corrective action.
Kindly download the attached file below for your safety.

If you aren’t enrolled in Paperless Statements and think you’ve received this message in error, please call our Customer Support team immediately, using the phone number on the “Contact Us” page on American Express.
If this was you, then you can safely ignore this email.
Please don’t reply directly to this automatically-generated e-mail message.
Sincerely,

(c) 2017 American Express

Technical Analysis


Analysis of the IP addresses contained within the header reveals that the Email has come from the IT systems of efox. Efox is a legitimate company based in China. The domain was originally created in 2008, so they are well established. Their mail servers are appearing on many spam blacklists so it is likely that they unfortunately succumbed to a hacking or are hosting a viral spambot in their system. (At the time of this EMail – April 2017)

It would appear that their service@efox-shop.com is the address that has been infiltrated, although it may just be a generic name being used. Note that the sender name appears as “American Express”, which is what most Email clients will display.   A handy tip to spot fake Emails is to compare the human readable and the Email address of the sender – a mismatch is a giveaway (Compare “American Express” with “service@efox-shop.com” ) – but do not assume a match indicates a good Email.

The Email we received was multipart, the part we do not publish for obvious reasons was an HTML form.

The form is designed to look like its from American Express, even using genuine American Express links to display images and download the CSS files. Instead of posting the form with all your secure details to American Express, the fake form sends the captured data to a Dutch registered domain.

The usual method for a hacker is to place the form processing script onto a breached site, although in this case, it looks like the perpetrator created an account with a hosting company. The domain name was just some random consonants and the domain now shows a “account suspended message”.

Moral of the story: Unless you have actually ordered something from efox-shop.com, any Emails from them are likely to be suspect. Generally, never trust an Email and never click on an Email link. (The only exception is when you request a password reset and the Email arrives seconds later.

Chidi Asika YOUR URGENT REPLY IS NEEDED…PICK UP FUNDS

From: Chidi Asika <asikachidi7@gmail.com>
Date: Tue, 21 Mar 2017 04:12:51 -0700
Subject: YOUR URGENT REPLY IS NEEDED...PICK UP FUNDS

Attachments

  • image.png

*Attn*

>> *,FROM THE DESK OF THE PAYMENT AND CLEARANCE DEPARTMENT OF THE C.B.NFrom
>> the office of Mr. kess chukwu you have advised to come pick up your funds
>> that is yet to be payed to you after your contract with the FEDERAL
>> REPUBLIC OF NIGERIA.TThis is the only simple and quiet way that you will
>> use in receiving your money. We are highly sorry for what ever
>> inconvenience this must have cost you it is due to the last election and
>> political crises that has been going on here, we are so great full that
>> our president from his illness so he has decided to pay up all contractors
>> that has done contracts with our dear and beloved country .You have been
>> advised to send your full name, contact address, telephone number, and a
>> scanned copy of your international passport, and with the letter of
>> agreement and contract sum.All reply must be sent to kesschukwu9@gmail.comI
>> await your urgent replyKess chukwukesschukwu9@gmail.com+234-9082274543*
>>
>

Exit mobile version