[nsp-sec] Attn Yahoo: Phishing Reply Address

Keith Schoenefeld schoenk at illinois.edu
Wed Mar 25 13:12:38 EDT 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Please disable: webmail_upgrade at ymail.com

Phish email follows:

Return-Path: <cyrus at mail.opia.illinois.edu>
Received: from murder ([unix socket])
	 (authenticated user=secinbox bits=0)
	 by mail.opia.illinois.edu (Cyrus v2.3.7-Invoca-RPM-2.3.7-2.el5) with
LMTPA;
	 Wed, 25 Mar 2009 12:03:36 -0500
X-Sieve: CMU Sieve 2.3
Received: from relay07.cites.uiuc.edu (relay07.cites.uiuc.edu
[128.174.4.73])
	by mail.opia.illinois.edu (Postfix) with ESMTP id 1F1BA4D889
	for <security at opia.illinois.edu>; Wed, 25 Mar 2009 12:03:36 -0500 (CDT)
Received: from mail.piolax.co.th (mail.piolax.co.th [203.121.155.105])
	by relay07.cites.uiuc.edu (8.14.2/8.14.2) with ESMTP id n2PH3OoY001219;
	Wed, 25 Mar 2009 12:03:31 -0500 (CDT)
Received: from mail.piolax.co.th (localhost.localdomain [127.0.0.1])
	by postfix.imss70 (Postfix) with ESMTP id 052F233E65D;
	Thu, 26 Mar 2009 00:03:24 +0700 (ICT)
Received: by mail.piolax.co.th (Postfix, from userid 48)
	id DAF0333E65B; Thu, 26 Mar 2009 00:03:23 +0700 (ICT)
Received: from 86.62.22.6 (proxying for 192.168.2.133)
        (SquirrelMail authenticated user hr_stf)
        by mail.piolax.co.th with HTTP;
        Thu, 26 Mar 2009 00:03:23 +0700 (ICT)
Message-ID: <60597.86.62.22.6.1238000603.squirrel at mail.piolax.co.th>
Date: Thu, 26 Mar 2009 00:03:23 +0700 (ICT)
Subject: WEBMAIL UPGRADE
From: "HelpDesk" <info at Upgrade.com>
Reply-To: webmail_upgrade at ymail.com
User-Agent: SquirrelMail/1.4.6-5.el3
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
X-TM-AS-Product-Ver: IMSS-7.0.0.3116-5.6.0.1016-16540.007
X-TM-AS-Result: No--7.599-5.0-31-1
X-imss-scan-details: No--7.599-5.0-31-1
X-Spam-Details:  rule=tag_notspam policy=tag score=45 spamscore=45
ipscore=0 phishscore=100 bulkscore=0 adultscore=0 classifier=spam
adjust=0 reason=mlx engine=5.0.0-0811170000 definitions=main-0903250096
X-Spam-Score: 45
X-Spam-OrigSender: info at Upgrade.com
X-Spam-Bar: *****




Dear Webmail Account User,

This message is from Webmail HelpDesk to all our account owners.

We are currently upgrading our Message Centre database. We are deleting
all unused WebMail accounts to create more space for new ones. In other
for your account not to be suspended or deleted, you will have to update
your account by providing the information listed below:

Confirm Your Webmail Account Details.

Email Address:
Username:
Password:
Date of Birth:

You will be sent a new confirmation alphanumerical password which will be
valid during this period and can be changed after the process.

We are very sorry for any inconveniences this might have caused you.

Thanks for your understanding.

Webmail HelpDesk.

Warning!!! Account owner(s) who refuses to update his or her account
within seven days of receiving this notice ends up being suspended
permanently.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAknKZgYACgkQdQwgufanQJrcjACfQtdzB6YirTpqQHrpgHTpK93+
9QAAnjj+wx5W09Mtz1HxV/oz9950r/ZU
=C/WL
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list