Page 1 of 1

Newer email phishing spam scam!

Posted: Mon May 09, 2011 10:50 pm
by Rook Zimbabwe
I just got this:
Email changed for safety!
Return-path: <suppot@webmailupgrade.waphall.com>
Envelope-to: test@test.org
Delivery-date: Mon, 09 May 2011 17:31:17 -0400
Received: from mail.bpc.bt ([202.144.155.54])
by server208.serverquality.com with esmtp (Exim 4.69)
(envelope-from <suppot@webmailupgrade.waphall.com>)
id 1QJY2k-0001rT-Lm
for test@test.org; Mon, 09 May 2011 17:31:07 -0400
Received: by mail.bpc.bt (Postfix, from userid 80)
id E1F18BF9001; Tue, 10 May 2011 03:20:53 +0600 (BTT)
Received: from 195.45.98.189 ([195.45.98.189]) by mail.bpc.bt (Horde
Framework) with HTTP; Tue, 10 May 2011 03:20:21 +0600
Message-ID: <20110510032021.15396mr027tc9w0s@mail.bpc.bt>
Date: Tue, 10 May 2011 03:20:21 +0600
From: Webmail Support Team <suppot@webmailupgrade.waphall.com>
Reply-to: info@despoconnect.com
To: undisclosed-recipients:;
Subject: Dear Account User !!!
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Internet Messaging Program (IMP) H3 (4.3.7) / FreeBSD-7.2
X-BPC-MailScanner-Information: Please contact ITD for more information
X-BPC-MailScanner-ID: E1F18BF9001.AD110
X-BPC-MailScanner: Found to be clean
X-BPC-MailScanner-From: suppot@webmailupgrade.waphall.com
X-Spam-Status: No, No
X-ServerQuality-MailScanner-Information: Please contact the ISP for more information
X-ServerQuality-MailScanner-ID: 1QJY2k-0001rT-Lm
X-ServerQuality-MailScanner: Found to be clean
X-ServerQuality-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=3.617, required 7, BAYES_60 1.50, RCVD_IN_BL_SPAMCOP_NET 1.35,
RCVD_IN_SORBS_WEB 0.77)
X-ServerQuality-MailScanner-SpamScore: sss
X-ServerQuality-MailScanner-From: suppot@webmailupgrade.waphall.com


Dear Subscriber,

This is to inform you that We have noticed some unusual activities in=20=20
your account. As a result, access to account has been limited in
accordance with the Webmail Terms And Condition User Agreement. To=20=20=20
re-validate your mailbox mail, click the link to update your account
form: You must follow this link to the complete this upgrade process:

http://www.webmailupgrade.uiwap.com

Thanks
Webmail Support Team.
=A9 2011 All rights reserved.





----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

--=20
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

(allthough the format was different since that is the complete text view of the email)

I laugh at how weezily STUPID this scam is... Which email account??? I don't have an account at anything that even remotely looks like this "service" and it sure ain't from GMail nor MY OWN website (where I would not shut myself down in any case!)

The wife got one too... this time she did not click it but called me. :mrgreen:

Be awares peeps!

Re: Newer email phishing spam scam!

Posted: Mon May 09, 2011 11:03 pm
by Rook Zimbabwe
Link (opened with SANDBOXIE) takes you to this page:
Image

notice all me HELPFUL info... as I don't use OUTLOOK I was not worried about harvesting info... I also blocked all forced programs...

Re: Newer email phishing spam scam!

Posted: Tue May 10, 2011 4:59 am
by Joakim Christiansen
Now make a bot to spam that submit form with nonsense info until you crash their server! :twisted:

Re: Newer email phishing spam scam!

Posted: Tue May 10, 2011 5:01 am
by MachineCode
You really have big problems with malware and spam, don't you? :lol: I think it's time you closed ALL your email accounts and set up brand-new ones. Seriously.

Re: Newer email phishing spam scam!

Posted: Tue May 10, 2011 5:53 am
by Nituvious
I think the REAL question here is this:
Image
:mrgreen: :mrgreen: :mrgreen: :mrgreen: :mrgreen: :mrgreen: :mrgreen:

I hope for your sake that you've been looking at the multi-colored wigs :twisted:

Re: Newer email phishing spam scam!

Posted: Tue May 10, 2011 4:46 pm
by Rook Zimbabwe
Nituvious wrote:I think the REAL question here is this:
Image
I hope for your sake that you've been looking at the multi-colored wigs :twisted:
:P
I was shopping for your birthday present! :wink:

Re: Newer email phishing spam scam!

Posted: Tue May 10, 2011 4:48 pm
by Rook Zimbabwe
MachineCode wrote:You really have big problems with malware and spam, don't you? :lol: I think it's time you closed ALL your email accounts and set up brand-new ones. Seriously.
This was a blanket spam attack on all email accounts on my web host... apparently they fired someone and he decided to lamely take revenge... 8)

Re: Newer email phishing spam scam!

Posted: Tue May 10, 2011 5:00 pm
by Nituvious
Rook Zimbabwe wrote:
Nituvious wrote:I think the REAL question here is this:
Image
I hope for your sake that you've been looking at the multi-colored wigs :twisted:
:P
I was shopping for your birthday present! :wink:
Well, I really like this one: :wink: :wink:
Image
:mrgreen:


[edit] speaking of wigs, I just received 2 spam emails in my super hidden ultra new gmail advertising wigs :shock:
This email address has had zero contact to the internet, is this a sign?

Re: Newer email phishing spam scam!

Posted: Tue May 10, 2011 7:55 pm
by GWarner
Easy to spot, easier to report as phishing and spam, easiest to delete! :mrgreen:

Re: Newer email phishing spam scam!

Posted: Wed May 11, 2011 4:01 pm
by Rook Zimbabwe
Hmmm... so you never emailed out from it? Was it open when you went to get that pic for the wig? (GMail I mean?)

I used to get the occasional piece of SPAM on my .MIL email just every once in a while...

Pro Patria Veritas

I get email harvest attempts from banner ads all day... It is getting nasty! :D

SSG RW Dunn
8 BDE HHQ - OPS

Re: Newer email phishing spam scam!

Posted: Wed May 11, 2011 4:40 pm
by Nituvious
Rook Zimbabwe wrote:Hmmm... so you never emailed out from it? Was it open when you went to get that pic for the wig? (GMail I mean?)

I used to get the occasional piece of SPAM on my .MIL email just every once in a while...

Pro Patria Veritas

I get email harvest attempts from banner ads all day... It is getting nasty! :D

SSG RW Dunn
8 BDE HHQ - OPS
Never checked it from a browser, always used it from Thunderbird. I don't think I had it open at the time either.
My .mil is always spammed thanks to the the guys who send out mailer lists to everyone.

160th Field Artillery all day long. :mrgreen: