[nsp-sec] ATTN AOL, phishing drop box

Fri Dec 10 13:11:41 EST 2010

Ack.  Got it.

----
W

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net 
> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of 
> Anthony Edwards
> Sent: Friday, December 10, 2010 11:02 AM
> To: nsp-security at puck.nether.net
> Subject: [nsp-sec] ATTN AOL, phishing drop box
> 
> ----------- nsp-security Confidential --------
> 
> Hi
> 
> Account username and phishing drop box 
> britishlifeinssurance at london.com:
> 
> abuse at abuse:~$ host -t mx london.com
> london.com mail is handled by 15 mailin-01.mx.aol.com.
> london.com mail is handled by 15 mailin-02.mx.aol.com.
> london.com mail is handled by 15 mailin-03.mx.aol.com.
> london.com mail is handled by 15 mailin-04.mx.aol.com.
> 
> : Subject: Email address used to launder stolen funds
> : 	(britishlifeinssurance at london.com) (MM #108003)
> : Date: Fri, 10 Dec 2010 10:44:57 -0500
> : Importance: high
> : From: Security Operations <SecurityOperations at markmonitor.com>
> : To: abuse at easynet.net, support at oooba.com
> : CC: DC-OPS <DC-OPS at markmonitor.com>
> : 
> : To Whom It May Concern:
> : 
> : We are writing from the MarkMonitor Anti-Fraud Operations Center
> : contacting you on behalf of Royal Bank of Scotland. The 
> email address
> : britishlifeinssurance at london.com is being used as part of a 
> fraudulent job
> : solicitation scheme to recruit third parties to launder stolen funds
> : from customers of Royal Bank of Scotland.
> : 
> : Please investigate and disable this email address immediately.
> : 
> : Should you have any questions, please call us at +1-301-515-0820.
> : 
> : Thank you,
> : Samira Nawaby
> : MM Ops Center
> : 
> : -------------------------------
> : 
> : ----- Original Message -----
> : 
> : From: British Life Insurance Company and Government/ Drugs & Crime
> : 
> : Sent: 11/22/10 12:41 PM
> : 
> : To: royalbankservice at gmx.co.uk
> : 
> : Subject: Government/ Drugs & Crime
> : 
> : 
> : 
> : Date: 22-11-2010
> : Attention: Mr CEO. Stephen Hester.
> : 
> : Notice Sir Miroslav Škorpil
> : 
> : There is a big problem , this fund has been impounded by the British
> : Life Insurance Company and Government/ Drugs & Crime , the 
> attached file
> : is a copy of notification we sent to ROYAL BANK OF SCOTLAND where we
> : founded the transfer was wired to a new beneficiary account.
> : 
> : We have placed a stopped order on the fund because of non 
> certification
> : of ANTI MONEY DRUG/ MONEY LAUNDERING/ ANTI TERRORIST 
> CERTIFICATE on the
> : fund was not found registered before carry out the 
> transfer. This is a
> : serious matter, we need the legal representative to the funds to
> : initiate communication with our agency, for immediate effect to know
> : what to do to get this matter resolved to avert forfeiture 
> of the fund
> : to the agency as they have threatened.
> : 
> : thank you for your cooperation.
> : 
> : your Faithfully
> : Dr. Ronald walker,
> : Email britishlifeinssurance at london.com
> : Fund/Goods Monitoring Department of London.
> : 
> : 
> : 
> : 
> : *** WARNING : This message originates from the Internet ***
> : 
> : 
> : ______________________ PÅ¯vodní zpráva: ________________________
> : > Od: "miroslav škorpil" <mirekx at centrum.cz>
> : > Komu: "digitalbanking" <digitalbanking at rbs.co.uk>
> : > Datum: 23.11.2010 16:40
> : > PÅ™edmÄ›t: Fwd: TRANSFER DEPARTMENT OF RBS.
> : >
> : 
> : 
> : ______________________ PÅ¯vodní zpráva: ________________________
> : > Od: "ROYAL BANK OF SCOTLAND" <royalbankservice at gmx.co.uk>
> : > Komu: "miroslav škorpil" <mirekx at centrum.cz>
> : > Datum: 23.11.2010 16:32
> : > PÅ™edmÄ›t: TRANSFER DEPARTMENT OF RBS.
> : >
> : We're sorry for the inconveniences occur to your issue of transfer.
> : We have written to the British Life Insurance Office On 
> Drugs and Crime.
> : but we understand that is your representative lawyer Barr 
> Diop have the
> : power to stand in this matter here in London because this 
> documents of
> : anti drug and anti terrorist certificate can easies to be 
> getting from
> : Barr Driop, be informed that the British Life Insurance 
> Office On Drugs
> : and Crime. need the lawyer to come to London as your Representative
> : Barrister, please contact the lawyer as quick as possible for the
> : releasing of your funds, we are sorry for the 
> inconveniences, thank you.
> : 
> : Yours Faithfully
> : 
> : CEO, Sir. Stephen Hester
> : 
> : Dear Mr Skorpil
> : 
> : Thank you for your message received via the feedback section of the
> : rbs.co.uk website.
> : 
> : The scenario described is consistent with advance fee fraud and it
> : appears that you are the intended victim. Advance fee fraud 
> is a well
> : known scam that originated in West Africa and in its 
> simplest form the
> : fraudster will offer to facilitate the receipt of a sum of money or
> : loan, providing a fee is paid in advance to cover certain 
> expenses and
> : fees. Documentation with false letterheads are always 
> presented as an
> : attempt to authenticate the transaction. I have attached a 
> link to the
> : Metropolitan police website that explains this type of fraud in more
> : detail - http://www.met.police.uk/fraudalert/419.htm
> : 
> : We recommend that you cease all communication with the individuals
> : concerned, report the matter to your local Police and urge 
> you not to
> : send any money if requested to do so.
> : 
> : We would like to thank you for taking the time to bring 
> this matter to
> : our attention.
> : 
> : Yours sincerely
> : 
> : L Gill
> : Royal Bank of Scotland plc
> : 
> : 
> : From: miroslav škorpil [mailto:mirekx at centrum.cz]
> : Sent: 29 November 2010 20:08
> : To: ~ Digital Banking
> : Subject: Fwd: Fw: Government/ Drugs & Crime
> : 
> : 
> : 
> : ______________________ PÅ¯vodní zpráva: ________________________
> : > Od: "ROYAL BANK OF SCOTLAND" <royalbankservice at gmx.co.uk>
> : > Komu: mirekx at centrum.cz
> : > Datum: 22.11.2010 13:50
> : > PÅ™edmÄ›t: Fw: Government/ Drugs & Crime
> : >
> : 
> : 
> : 
> : 
> : 
> : 
> : ----- Original Message -----
> : 
> : From: British Life Insurance Company and Government/ Drugs & Crime
> : 
> : Sent: 11/22/10 12:41 PM
> : 
> : To: royalbankservice at gmx.co.uk
> : 
> : Subject: Government/ Drugs & Crime
> : 
> : Date: 22-11-2010
> : Attention: Mr CEO. Stephen Hester.
> : 
> : Notice Sir Miroslav Škorpil
> : 
> : There is a big problem , this fund has been impounded by the British
> : Life Insurance Company and Government/ Drugs & Crime , the 
> attached file
> : is a copy of notification we sent to ROYAL BANK OF SCOTLAND where we
> : founded the transfer was wired to a new beneficiary account.
> : 
> : We have placed a stopped order on the fund because of non 
> certification
> : of ANTI MONEY DRUG/ MONEY LAUNDERING/ ANTI TERRORIST 
> CERTIFICATE on the
> : fund was not found registered before carry out the 
> transfer. This is a
> : serious matter, we need the legal representative to the funds to
> : initiate communication with our agency, for immediate effect to know
> : what to do to get this matter resolved to avert forfeiture 
> of the fund
> : to the agency as they have threatened.
> : 
> : thank you for your cooperation.
> : 
> : your Faithfully
> : Dr. Ronald walker,
> : Email britishlifeinssurance at london.com
> : Fund/Goods Monitoring Department of London.
> : 
> : 
> : 
> : 
> : *** WARNING : This message originates from the Internet ***The Royal
> : Bank of Scotland plc, Registered in Scotland No. 90312. Registered
> : Office: 36 St Andrew Square, Edinburgh EH2 2YB
> : 
> : Authorised and regulated by the Financial Services Authority.
> : 
> : This e-mail message is confidential and for use by the 
> addressee only.
> : If the message is received by anyone other than the 
> addressee, please
> : return the message to the sender by replying to it and then 
> delete the
> : message from your computer. Internet e-mails are not 
> necessarily secure.
> : The Royal Bank of Scotland plc does not accept responsibility for
> : changes made to this message after it was sent.
> : 
> : Whilst all reasonable care has been taken to avoid the 
> transmission of
> : viruses, it is the responsibility of the recipient to 
> ensure that the
> : onward transmission, opening or use of this message and any 
> attachments
> : will not adversely affect its systems or data. No responsibility is
> : accepted by The Royal Bank of Scotland plc in this regard and the
> : recipient should carry out such virus and other checks as 
> it considers
> : appropriate
> : 
> : Have a nice day.
> : Please now I really zmatený.Vy one side you write, that 
> everything can
> : be in order and that the insurance needs confirmation, and 
> then write
> : it's podvot.
> : What do you mean and how do you stand on this issue is 
> really interesting.
> : Your bank has no control and feedback?
> : I am shocked by this situation and totally confused me what 
> you serve is
> : absolutely incomprehensible.
> : Please clear and concise answers, and indeed in 
> understanding and sense
> : of security and confidence to your behavior.
> : Thank you for the result of this situace.Miroslav Škorpil
> : 
> : PÅ™eji hezký den.
> : Prosím ted jsem opravdu zmatený.Vy z jedné strany 
> píšete,Å¾e se vše dá
> : do poÅ™ádku a Å¾e pojištovna potÅ™ebuje potvrzení a potom 
> píšete,Å¾e je
> : to podvot.
> : Jak tomu mám rozumÄ›t a jak se k této vÄ›ci stavíte je 
> opravdu zajimavé.
> : Vaše banka nemá Å¾ádné kontroli a zpÄ›tné vazbi?
> : Já jsem z této situace šokovaný a naprosto zmatený,to co mi 
> podávate je
> : naprosto nepochopitelné.
> : Prosím o jasnou a struÄ?nou odpovÄ›d a to opravd ve smyslu 
> pochopení a
> : bezpeÄ?nosti a dÅ¯vÄ›ry,kterou k vám chovám.
> : DÄ›kuji za výsledek této situace.Miroslav Škorpil
> : *** WARNING : This message originates from the Internet ***
> 
> 
> 
> 
> ----- End forwarded message -----
> 
> --
> Anthony Edwards
> anthony.edwards at sns.bskyb.com
> Abuse Team Manager  -  Sky Network Services
> DDI: 0161 888 3507
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the 
> nsp-security
> community. Confidentiality is essential for effective 
> Internet security counter-measures.
> _______________________________________________
> 