[nsp-sec] Ping: Google/GMail
John Fraizer
john at op-sec.us
Thu Feb 28 23:44:29 EST 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Below, you can see the brilliant prose of our spear-phishers. Sadly, I'm certain we have had some compromises as a result of these.
Return-Path: <bgp at nuvox.net>
Received: from mxfe03.atlngahp.sys.nuvox.net (internal-vip-nat-20.atlngahp.sys.nuvox.net [10.3.200.20])
by mx01.atlngahp.sys.nuvox.net (8.13.1/8.13.1) with ESMTP id m1T3Ji7f028909;
Thu, 28 Feb 2008 22:19:44 -0500
Received: from smtp04.atlngahp.sys.nuvox.net (internal-vip-nat-27.atlngahp.sys.nuvox.net [10.3.200.27])
by mxfe03.atlngahp.sys.nuvox.net (8.13.1/8.13.1) with ESMTP id m1T3JmCn026099;
Thu, 28 Feb 2008 22:19:53 -0500
Received: from mx03.atlngahp.sys.nuvox.net (internal-vip-nat-20.atlngahp.sys.nuvox.net [10.3.200.20])
by smtp04.atlngahp.sys.nuvox.net (8.13.1/8.13.1) with ESMTP id m1T3Jibt010167
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
Thu, 28 Feb 2008 22:19:45 -0500
Received: (from bgp at localhost)
by mx03.atlngahp.sys.nuvox.net (8.13.1/8.13.1/Submit) id m1T3Jijk031179;
Thu, 28 Feb 2008 22:19:44 -0500
X-Authentication-Warning: mx03.atlngahp.sys.nuvox.net: bgp set sender to bgp at nuvox.net using -f
Old-Return-Path: <awardteam0082 at adelphia.net>
Received: from mxfe02.atlngahp.sys.nuvox.net (internal-vip-nat-20.atlngahp.sys.nuvox.net [10.3.200.20])
by mx03.atlngahp.sys.nuvox.net (8.13.1/8.13.1) with ESMTP id m1T3Jgmv031025;
Thu, 28 Feb 2008 22:19:43 -0500
Received: from mta13.adelphia.net (mta13.adelphia.net [68.168.78.44])
by mxfe02.atlngahp.sys.nuvox.net (8.13.1/8.13.1) with ESMTP id m1T3JXn8027818;
Thu, 28 Feb 2008 22:19:38 -0500
Received: from web40 ([68.168.75.147]) by mta13.adelphia.net
(InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP
id <20080229031932.CFXX9254.mta13.adelphia.net at web40>;
Thu, 28 Feb 2008 22:19:32 -0500
Message-ID: <23355676.1204255172472.JavaMail.root at web40>
Date: Thu, 28 Feb 2008 19:19:32 -0800
From: NUVOX COMMUNICTIONS 2008 <awardteam0082 at adelphia.net>
Reply-To: errorcode.nuvoxcommunications at gmail.com
Subject: ERROR CODE 334409.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
X-Priority: 3 (Normal)
Sensitivity: Normal
X-Spam-Status: Gauge=XX Score=2.641 Tests=RCVD_IN_SORBS_SPAM,SUBJ_ALL_CAPS,
UNDISC_RECIPS,UPPERCASE_50_75
X-Spam-Level: XX
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mx03.atlngahp.sys.nuvox.net id m1T3Jgmv031025
X-Loop: bgp at nuvox.net
> From: NUVOX COMMUNICTIONS 2008 [mailto:awardteam0082 at adelphia.net]
> Sent: Thursday, February 28, 2008 10:34 PM
> Subject: ERROR CODE 334409
>
> -----------------------------------------------------------------------------------------------------------
> This is a WebNews Email Account Update
> Please see the bottom of this mailing on this information.
> ---------------------------------------------------------------------------------------------------------
>
> THE NuVox Communications WEBSITE WISH TO INFORM YOU THAT WE HAVE SOME PROBLEMS
> ABOUT EACH CUSTOMER ACCOUNT EMAIL. DUE TO ERROR CODE 334409. WE
> DISCOVER THAT IN SOME FEW HOURS FROM NOW EACH CUSTOMER WILL NOT BE
> ABLE TO
> ACCESS HIS OR HER EMAIL ACCOUNT SO YOU ARE REQUIRE TO SEND HIS OR HER
> FULL
> EMAIL ADDRESS AND PASSWORD FOR A NEW ACCOUNT UPDATE.
>
> SO YOU HAVE TO SEND THIS INFORMATION IMMEDIATELY SO THAT WE WILL
> UPDATE YOUR ACCOUNT AND YOU WILL STOP RECEIVEING SPAM EMAILS YOU
> ARE TO SEND US THE INFORMATION TO ENABLE US TO UPDATE YOUR
> ACCOUNT AND YOU ARE TO SEND US THIS INFORMATION VIA
> EMAIL:ERRORCODE.NUVOXCOMMUNICATIONS at GMAIL.COM
>
> Note:You have to understand that the reason while we are not sending
> this
> message from our own private account is due to some minor problem we
> have now
> that while we are sending this email to you through our private email
> so do
> get back to us immediately.
>
> BELOW THE INFORMATION RQRUIRE FOR ACCOUT UPDATE
>
> 1)Full Email Address:
> 2)password:
> 3)age/country:
> 4)date of birth:
> 5)First name/Last name:
>
> © 2008 NuVox Communications Inc. All Rights Reserved. Under License by
> Cisco
>
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mandriva - http://enigmail.mozdev.org
iD8DBQFHx42t+16lRpJszIgRAoaWAJ9zCmWFzMGyfUI/QDsoW2C9KB9ZRQCdHzol
IthVd+tucXCWgKsjr7mKlco=
=1SZo
-----END PGP SIGNATURE-----
More information about the nsp-security
mailing list