[nsp-sec] ATT Yahoo/AOL scam drop box

[Salusky, William]

ACK.
 
----
W
 
 

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net 
> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Jeff Wolfe
> Sent: Tuesday, February 01, 2011 8:58 PM
> To: nsp-security at puck.nether.net
> Subject: [nsp-sec] ATT Yahoo/AOL scam drop box
> 
> ----------- nsp-security Confidential --------
> 
> Hey Yahoo / AOL folks:
> 
> Run of the mill scam, drop box is "dmmgarlc at aol.com".
> 
> Looks like it was sent from Yahoo!.
> 
> 
> -JEff
> Penn State
> 
> > X-IronPort-AV: E=Sophos;i="4.60,409,1291611600"; 
> d="scan'208";a="11728626"
> > X-IronPort-Anti-Spam-Result: 
> > 
> Av//AKtoR03Rv1ZgkWdsb2JhbAAilRQJDgEKGwEkGBo2CIQXiXoBAQEBFAoHEQMSD4YppX
> > 6BCwGBG4xbBSWFLIUXilCKKQ
> > X-IronPort-Anti-Spam-Filtered: true
> > Received: from web82201.mail.mud.yahoo.com ([209.191.86.96]) by 
> > ironport1.ems.psu.edu with SMTP; 01 Feb 2011 04:59:53 -0500
> > Received: (qmail 98857 invoked by uid 60001); 1 Feb 2011 09:59:52 
> > -0000
> > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; 
> > s=s1024; t=1296554392; 
> > bh=wORmBsII3m/b94Xp6FupPYWJ+ktdBAP8shj3nFYgy+E=; 
> > 
> h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Repl
> > y-To:Subject:To:MIME-Version:Content-Type; 
> > 
> b=M9R2o+VgLp8uN0uV9eM4MQsmlG+UViCGR4ZUxFpMth3HgtaJwuEvlY7hMagS5UmETrC0
> > 
> tGML9885dF20KjNOlYbdnDsivIziBmuzwtXLrh+vrHGcIPoWcuHUXA5O8lJOK9Lsk6bk5M
> > /y3usB3zZ0TNYceqNik8o7y2IeHasRoaI=
> > Message-ID: <816039.90427.qm at web82201.mail.mud.yahoo.com>
> > X-YMail-OSG: kMTg2XEVM1n6N4jIPUzNtwdrtoYlYlm3W4w_SWMqqObdw4S 
> > far_tWQ3eV55klYP_prgCv5t9q6A7cHL6VLE5d3TvXXFqTC.acDNI73zfaV9 
> > pID1LK5QAO44..qXr8JF0.cEDR73c2xpBzU0CGda7HiEi64zIjYvavHgTWsN 
> > huoaEY.x7sCQK.a34faGINu1gqr31y0cJkDMNj2RI4dJwuEFHeF0sU4iBxEC 
> > s29k7f5ydFr3qt6mpGcyVRy.Pj2C4C4Ym9_ToEJIQNnIjkGfN5gJGzSIDpma 
> > 4cSFQfUvdcxQQk0YaO88yf6anurKyecxTOckMPJEk90bFNyph3vSt_KOIojv 
> > fDloPt9NUae03hAZxEVgQqSgcM3AGSWYLv4sWzA06Ao5npq0vORRt8UtykZj 
> > g_PZqhAGnC9soA0kZJXxRQHC2o5HYkgqcgLUVfsIiq4gA7Y7ovCwXztEClBk 
> > I_e_yVKbp4EJfeSxkRSJa3h0FLF3vruODsm6sJihUMGlyHPrWwgz1eg8ZpxI 
> > r.8cqFxrYWCCreGmhRCFShk1EB6gwnC3oO.K0ig--
> > Received: from [41.155.5.104] by 
> web82201.mail.mud.yahoo.com via HTTP; 
> > Tue, 01 Feb 2011 01:59:52 PST
> > X-RocketYMMF: mmoffat2001
> > X-Mailer: YahooMailClassic/11.4.20 
> YahooMailWebService/0.8.107.285259
> > Date: Tue, 1 Feb 2011 01:59:52 -0800 (PST)
> > From: Dale Malecki <dmmgarlc at aol.com>
> > Reply-To: dmmgarlc at aol.com
> > Subject: OUR VACATION PROBLEM!!!!!!!!!HELP
> > To: undisclosed recipients: ;
> > MIME-Version: 1.0
> > Content-Type: multipart/alternative; 
> boundary="0-236901884-1296554392=:90427"
> >
> > Am writing this with tears in my eye,my family and I came 
> down here to 
> > Wales UK. for a short vacation  unfortunately we were mugged at the 
> > park of the hotel where we lodge,all cash,credit card and 
> mobile phone 
> > were stolen off from  us but luckily for us we still have our 
> > passports with us.We've been to the embassy and the Police station 
> > here, but they're  not helping issues at all and our flight leaves 
> > today but we're having problems settling the hotel bills, and the 
> > hotel  manager won't let us leave until we settle the bills,i'm 
> > freaked out at the moment.we need a quick loan,promise to 
> pay you back 
> > once we get home please help.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Thanks
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Dale
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the 
> nsp-security community. Confidentiality is essential for 
> effective Internet security counter-measures.
> _______________________________________________
>