[nsp-sec] yahoo.com.hk as hoax reply address

[Dave Mitchell]

Ack, Y!. I'll get it taken care of.

Thanks!

-dave

On Thu, Aug 06, 2009 at 01:12:21PM +0300, Jussi Eronen wrote:
> ----------- nsp-security Confidential --------
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hello,
> 
> We've been lately seeing hoax messages of the following type with
> patrickchan.89126 at yahoo.com.hk listed as the reply address. It's either
> a nigerian hoax or money mule proposition - the message is so poorly
> translated to Finnish that it is quite hilarious. I don't believe many
> will fall for this, but it still would not hurt to have the reply
> address taken care of.
> 
> - -Jussi
> 
> 
> Received: from internal ([xx]) by internal with internal;
> 	 Thu, 6 Aug 2009 12:26:00 +0300
> Message-ID:<1184aba00003df08 at mail2.ficora.fi>
> Received: from mx2.rmt.ru (mx2-src16.rmt.ru [194.67.139.27])
> 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
> 	(No client certificate requested)
> 	by xxx (Postfix) with ESMTP id CA9F120C11
> 	for <cert at ficora.fi>; Thu,  6 Aug 2009 12:25:58 +0300 (EEST)
> Received: from User (ip184-90-210-87.adsl2.static.versatel.nl
> [87.210.90.184])
> 	(authenticated bits=0)
> 	by mx2.rmt.ru (8.14.2/8.14.2) with ESMTP id n769JmXT014700;
> 	Thu, 6 Aug 2009 13:20:05 +0400 (MSD)
> 	(envelope-from valaam at rmt-net.ru)
> Message-Id: <200908060920.n769JmXT014700 at mx2.rmt.ru>
> X-Authentication-Warning: mx2.rmt.ru: Host
> ip184-90-210-87.adsl2.static.versatel.nl [87.210.90.184] claimed to be User
> Reply-To: <patrickchan.89126 at yahoo.com.hk>
> From: "chan"<valaam at rmt-net.ru>
> Subject: Kiireelliset Business Partnership Needed
> Date: Thu, 6 Aug 2009 17:20:15 +0800
> MIME-Version: 1.0
> Content-Type: text/plain;
> 	charset="Windows-1251"
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> To: undisclosed-recipients:;
> Return-Path: valaam at rmt-net.ru
> X-OriginalArrivalTime: 06 Aug 2009 09:26:00.0184 (UTC)
> FILETIME=[E923D780:01CA1677]
> 
> KIIREELLISIST? liiketoiminnan Patrick K. W. CHAN!
> L?HETT?J?: Mr. Patrick K. W. Chan
> (Varapuheenjohtaja & Executive Officer)
> Bank of China Limited
> Hong Kong.
> 
> Olen Mr. Patrick KW Chan varapuheenjohtaja ja toimitusjohtaja Bank of
> China Limited, Hong Kong. Minulla on tuottoisaa liiketoimintaa
> foorumeilla aivohalvaus yhteist? etua jakaa teid?n kanssanne, ja se
> liittyy siirt?? suuren summan rahaa. Minulla on viittaus minun pyrkimys,
> joka sopii minun ehdotettu liikesuhde. Jos olet kiinnostunut
> ty?skentelem??n kanssamme minun tehd? yhteytt? minuun kautta minun
> yksityinen e-mail (patrickchan.89126 at yahoo.com.hk) lis?tietoja, jos
> l?het? minulle.
> 
> Sinun Koko nimi:
> Puhelin ja faksi:
> Maa:
> 
> Pian vastauksen t?h?n kirjeeseen on appreciated.Sincerely,
> 
> Mr. Patrick K. W. Chan
> 
> S?hk?posti:patrickchan.89126 at yahoo.com.hk
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> 
> iD8DBQFKeqyEb5sSMzb1qN0RAuhFAKDWuwc/js/Ox/myyxO9c/qr/L15cgCeIXDf
> xoGGjQnGg3FXZzkxbQMwpU4=
> =QzTv
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20090810/9fe66f63/attachment-0001.sig>