[nsp-sec] Attention Gmail - Lost all my money scam from carleeclark at gmail.com

Smith, Donald Donald.Smith at qwest.com
Mon Nov 29 14:04:52 EST 2010 

This is a fairly old scam.
http://www.givemebackmycredit.com/blog/2010/07/scam-alert-desperate-friend-mugged-and-stranded-in-london-not.html

Dumb American's believing you get mugged at gunpoint in London:(
Ok its not IMPOSSIBLE but highly improbable.

Heck even in America most muggings are unarmed or armed with a knife or blunt instrument not a gun but in London guns are not very common:)

(coffee != sleep) & (!coffee == sleep)
Donald.Smith at qwest.com gcia

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net
> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Peter Moody
> Sent: Monday, November 29, 2010 11:28 AM
> To: Joel Rosenblatt
> Cc: nsp-security at puck.nether.net
> Subject: Re: [nsp-sec] Attention Gmail - Lost all my money
> scam from carleeclark at gmail.com
>
> ----------- nsp-security Confidential --------
>
> double checked; this was a mugged in london scam using a
> hijacked account.
> so, acked, but not whacked.
>
> Cheers,
> peter
>
> On Mon, Nov 29, 2010 at 8:09 AM, Peter Moody
> <pmoody at google.com> wrote:
>
> > ack.
> >
> >
> > On Mon, Nov 29, 2010 at 6:17 AM, Joel Rosenblatt
> <joel at columbia.edu>wrote:
> >
> >> ----------- nsp-security Confidential --------
> >>
> >> Hi,
> >>
> >> We got a bunch of these .. please whack as appropriate.
> >>
> >> Thank you,
> >> Joel
> >>
> >> Joel Rosenblatt, Manager Network & Computer Security
> >> Columbia Information Security Office (CISO)
> >> Columbia University, 612 W 115th Street, NY, NY 10025 /
> 212 854 3033
> >> http://www.columbia.edu/~joel
> >> Public PGP key
> >>
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x90BD740BCC7326C3
> >>
> >>
> >>
> >> This message is in MIME format.
> >>
> >> --=_2dw68sce22v4
> >> Content-Type: message/rfc822
> >> MIME-Version: 1.0
> >>
> >> Return-Path: <carleeclark at gmail.com>
> >> Received: from lmtpproxyd (mockduck-eth1.cc.columbia.edu
> [128.59.33.175])
> >>         by halibut.cc.columbia.edu (Cyrus v2.3.16) with LMTPA;
> >>         Wed, 24 Nov 2010 09:47:25 -0500
> >> X-Sieve: CMU Sieve 2.3
> >> Received: from mockduck.cc.columbia.edu ([unix socket])
> >>         by mail.columbia.edu (Cyrus v2.3.16) with LMTPA;
> >>         Wed, 24 Nov 2010 09:47:25 -0500
> >> X-Sieve: CMU Sieve 2.3
> >> Received: from yuzu.cc.columbia.edu
> (yuzu.cc.columbia.edu[128.59.28.167])
> >>        by mockduck.cc.columbia.edu (8.13.1/8.13.1) with ESMTP id
> >> oAOElP8h016431
> >>        for <ir71 at cyrusfe.cc.columbia.edu>; Wed, 24 Nov
> 2010 09:47:25
> >> -0500
> >> Received: from mail-wy0-f173.google.com
> (mail-wy0-f173.google.com[74.125.82.173])
> >>        by yuzu.cc.columbia.edu (8.14.4/8.14.3) with ESMTP id
> >> oAOElJB3000674
> >>        for <ir71 at columbia.edu>; Wed, 24 Nov 2010 09:47:24
> -0500 (EST)
> >> Received: by wyj26 with SMTP id 26so10977744wyj.18
> >>       for <ir71 at columbia.edu>; Wed, 24 Nov 2010 06:47:19
> -0800 (PST)
> >> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> >>       d=gmail.com; s=gamma;
> >>
> h=domainkey-signature:mime-version:received:received:reply-to:date
> >>        :message-id:subject:from:content-type;
> >>       bh=RNXmcRmuSHFcTFKjH/Xlk0y4znsb0thADFWA199Z5dM=;
> >>
> b=p37Im1jPvHzfkfrpZUU/DvXvnWiTs4HpEw2aOHerYwK+Gfn9YpsrPYFhupgdjuKuae
> >>
> >>
> BsOdJHvNH2FjmcFi513DkHXBBEEkOC9ZpzkQILruyetASXcK4fc9T2TZaCbr8djy5btY
> >>        vuf5fN10S6A11tU1ptG2HqwCZw0lS7vRxrtuY=
> >> DomainKey-Signature: a=rsa-sha1; c=nofws;
> >>       d=gmail.com; s=gamma;
> >>
> h=mime-version:reply-to:date:message-id:subject:from:content-type;
> >>
> b=tb11enigcoIFtMonsLoHZXsuSm+y9m1RKb3EiTLepMJ8Xmxe59lTOTqW4cH9Dwz9Jx
> >>
> >>
> ce9/H+6MnrOKzFEh14Jj/CzTWuVdDyEyHN1xM8akQ3VLKzb4Mpqb13F3ksYWqnmpGiVD
> >>        B2tCpJ77DuSHcFfe1anXd/TJyb3qh0l08mBDo=
> >> MIME-Version: 1.0
> >> Received: by 10.227.127.136 with SMTP id
> g8mt12171590wbs.44.1290610031738;
> >> Wed, 24 Nov 2010 06:47:11 -0800 (PST)
> >> Received: by 10.227.133.16 with HTTP; Wed, 24 Nov 2010
> 06:47:11 -0800
> >> (PST)
> >> Reply-To: carleclark at ymail.com
> >> Date: Wed, 24 Nov 2010 15:47:11 +0100
> >> Message-ID:
> <AANLkTi=hcvkgUcin9jwAPBQ_dtfd7N-gU=Y0+27HDFYF at mail.gmail.com<
> Y0%2B27HDFYF at mail.gmail.com>
> >> >
> >> Subject: My Plight !!!
> >> From: carlee clark <carleeclark at gmail.com>
> >> Content-Type: text/plain; charset=ISO-8859-1
> >> To: undisclosed-recipients:;
> >> X-Spam-Score: 0 ()
> >> X-Scanned-By: MIMEDefang 2.68 on 128.59.28.167
> >>
> >> I'm writing this with tears in my eyes,my family and i
> came down here
> >> to London United Kingdom for a short vacation and got mugged at gun
> >> point last night at the park of the hotel where we lodged...All
> >> cash,credit cards and cell were stolen off me...I've been to the
> >> embassy and the Police here but they're not helping issues at
> >> all....But the good thing is that we still have our passport,our
> >> flight leaves today and I'm having problems settling the hotel
> >> bills...The hotel manager won't let us leave until i
> settle the hotel
> >> bills , all we need is $1,950,but anything you could
> assist with now
> >> be helpful now... Am freaked out right now Please reply
> and let me if
> >> can you have the money wire to me through western union I'll surely
> >> get the money back to you in couple of days.
> >>
> >> Thanks,
> >> Carlee
> >>
> >>
> >> --=_2dw68sce22v4--
> >>
> >>
> >>
> >>
> >> Joel Rosenblatt, Manager Network & Computer Security
> >> Columbia Information Security Office (CISO)
> >> Columbia University, 612 W 115th Street, NY, NY 10025 /
> 212 854 3033
> >> http://www.columbia.edu/~joel
> >> Public PGP key
> >>
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x90BD740BCC7326C3
> >>
> >>
> >>
> >> _______________________________________________
> >> nsp-security mailing list
> >> nsp-security at puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/nsp-security
> >>
> >> Please do not Forward, CC, or BCC this E-mail outside of
> the nsp-security
> >> community. Confidentiality is essential for effective
> Internet security
> >> counter-measures.
> >> _______________________________________________
> >>
> >
> >
> >
> > --
> > Peter Moody      Google    1.650.253.7306
> > Network Security Engineer  pgp:0xC3410038
> >
> >
>
>
> --
> Peter Moody      Google    1.650.253.7306
> Network Security Engineer  pgp:0xC3410038
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the
> nsp-security
> community. Confidentiality is essential for effective
> Internet security counter-measures.
> _______________________________________________
>

This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

More information about the nsp-security mailing list